Query about monitoring unknown Internet traffic

[Nathaniel Biser]

Hi Bret,
There are several tools and techniques that you can use here. One is netstat, which can give you information about where your data is going. Netstat may not give you the detailed info you require, so you could try using tools like Wireshark and network miner(both free, and both run on Linux) to get more details. I would especially recommend network miner. Of course, you should also do what Ralf said and look to see if you are running any new applets, or any phone accounts.

Best of luck,
Nathaniel
On Oct 17, 2015, at 5:50 PM, <silver.bullet at zoho.com<mailto:silver.bullet at zoho.com>> <silver.bullet at zoho.com<mailto:silver.bullet at zoho.com>> wrote:

Hi Bret,

the kind of addresses involved usually leads to the culprit. You can
monitor Internet traffic and see the addresses using Wireshark.

Assumed you should be a Firefox user, then only open Firefox and
Wireshark.

Then search for "google" in Firefox's about:config and delete all
default google entries.

Monitor Firefox with Wireshark again.

Are you running any update daemons? Are you running phone home
software, e.g. Sylpheed without disabling phone home or Ardour not from
official repositories? Are you using what Richard Stallman calls Ubuntu
Spyware? Even a weather applet gets information from the Internet.

The phone home phenomena isn't just an issue for your iPhone, it's also
reality for many Linux applications and in addition Ubuntu is disputed
regarding what Richard Stallman calls Ubuntu Spyware.

First rule out that you are not carelessly using software such as
Firefox from official repositories, before searching unknown spyware.

Regards,
Ralf


--
ubuntu-users mailing list
ubuntu-users at lists.ubuntu.com<mailto:ubuntu-users at lists.ubuntu.com>
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20151017/331982c0/attachment.html>