[ overboard / sfw / alt / cytube] [ leftypol / b / WRK / hobby / tech / edu / ga / ent / music / 777 / posad / i / a / R9K / dead ] [ meta ]

/tech/ - Technology

"Technology reveals the active relation of man to nature"
Name
Email
Subject
Comment
Captcha
Tor Only

Flag
File
Embed
Password (For file deletion.)

Matrix   IRC Chat   Mumble   Telegram   Discord


File: 1626309778826.jpg ( 280.49 KB , 1000x1308 , answer: all of them.jpg )

 No.10173

I was logging all network traffic and noticed requests to googleusercontent at seemingly random times and also to Amazon's AWS. Now I'm worried what it could be sending/receiving.
All I could find was a couple of stackoverflow questions about the same thing saying it was apparently NetworkManager (thanks, GNOME!) but I don't have it installed.
>>

 No.10174

NetworkManager??? That sounds speculative. Source on where this is being discussed?
>>

 No.10175

I hope you added those domains to /etc/hosts, OP.
>>

 No.10192

don't add those, to be blocked, into hosts unless it's okay to have a bunch of websites broken

try to firewall it instead, or get a better program

possibly it's some webified shit again because it's hip or some other crap
>>

 No.10198

Here's what I do:
>use netstat to determine which processes are connecting to the Internet
>disable all of them that I don't need
>use nftables to block the rest
>use wireshark to see what's still going on

If I wanted to go harder I could also:
>use nftables to block EVERYTHING except system Tor service and configure Tor browser to use system Tor as a proxy
>>

 No.10212

What distro are you using OP?
>>

 No.10214

>>10173
Are you sure "pozzed" is the right word, anon?
>>

 No.10217

i checked my arch and mint partitions and they kept pinging (ip).(letters).googleusercontent.com, what the fuck?
>>

 No.10218

>>10173
its probably 100000 sites using google fonts and aws hosting
>>

 No.10220

>>10218
I hadn't loaded any websites at the time I checked and I also use an adblocker with everything blacklisted by default.
>>

 No.10253

>>10220
If you want to inspect anything you have to close down your browsers, torrents, the usual and wait for existing connections to close so you have a clean slate. Modern websites for example are constantly connecting in the background via JS, browsers themselves make connections in the background, and torrent peers can take a while to figure out you're not participating anymore.

Then use netstat + wireshark to see which processes are still connecting to the Internet and to where.
- netstat will tell you which process is connected to what IP(s)
- wireshark will tell you about the packets being sent to and from that IP, you can also inspect DNS requests to figure out what domain it's connecting to, if any

Unique IPs: 4

[Return][Catalog][Top][Home][Post a Reply]
Delete Post [ ]
[ overboard / sfw / alt / cytube] [ leftypol / b / WRK / hobby / tech / edu / ga / ent / music / 777 / posad / i / a / R9K / dead ] [ meta ]
ReturnCatalogTopBottomHome