found something strange from netstat

[milestoned]

Active Connections

Proto Local Address Foreign Address State
TCP rsx:1033 192.168.100.8:50797 SYN_SENT
TCP rsx:1401 64.233.187.104:http ESTABLISHED
TCP rsx:1479 blackplasma.net:http TIME_WAIT
TCP rsx:1532 blackplasma.net:http TIME_WAIT
TCP rsx:1533 blackplasma.net:http TIME_WAIT
TCP rsx:1554 207.55.232.11:http ESTABLISHED
TCP rsx:5800 localhost:1028 CLOSE_WAIT
TCP rsx:5900 localhost:1027 CLOSE_WAIT

The strange connection is the first 192.168.100.8:50797.
My subnet is 10.122.199.0. Not the best TCP/IP guy. What could that be? Can't ping it. This is from laptop that has a wireless connection. So you can why I am concerned.

 

[chieftan999]

Do you have any systems on your local network with that address scheme?
Note the SYN_SENT. This suggests that it is something at your end that initiated a conversation.

Also, have a look at what utilises port 50797.

Reamin positive. The affect on those around you will amaze.

 

[milestoned]

duh, I know what it is. I have an IP Softphone - that's the IP address of the PBX it connects to. I guess it sits and listens even though I haven't launched it maybe so it can POP on an inbound call. who knows