Find the answer to your Linux question:
Results 1 to 2 of 2
I am running Ubuntu 12.04 lts 32 bit. Just recently installed GUFW. I have been checking to see if someone is trying to hack into my computer. This is what ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Dec 2012
    Posts
    1

    Help with geoip


    I am running Ubuntu 12.04 lts 32 bit. Just recently installed GUFW. I have been checking to see if someone is trying to hack into my computer. This is what I have found so far.
    I ran these few commands and these are the results.
    First I ran:

    netstat -anp | grep -e tcp -e udp
    tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1760/dnsmasq
    tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1061/cupsd
    tcp 1 0 192.168.1.100:33937 91.189.94.25:80 CLOSE_WAIT 2022/ubuntu-geoip-p
    tcp6 0 0 ::1:631 :::* LISTEN 1061/cupsd
    udp 0 0 127.0.0.1:53 0.0.0.0:* 1760/dnsmasq
    udp 0 0 0.0.0.0:68 0.0.0.0:* 1055/dhclient

    I want to know who this (192.168.1.100:33937)

    netstat -tp
    and I find:
    tcp 1 0 192.168.1.100:33937 mulberry.canonical:http CLOSE_WAIT 2022/ubuntu-geoip-p

    I don't know who this (mulberry.cononical:http) is or what (ubuntu-geoip-p) is either.
    I have found some sites that show you how to disable the (geoip) program. I have not found any definitive answer as to what happens if you disable it. Is it good or bad
    for linux? Does it even matter if its running or not? It is listed as closed_wait, so I guess there is no information being sent back and forth. I could be wrong.

    Thanks in advance for any information you can give.
    Mortars.

  2. #2
    Linux Enthusiast
    Join Date
    Jan 2005
    Location
    Saint Paul, MN
    Posts
    626

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •