[arm-allstar] Connection Results

[Tony Ross]

On 05/16/2017 09:10 AM, "Bryan St Clair via arm-allstar" wrote:

> I understood what you were telling me.  My background is in network
> security.  Since this software is new to me, I am just trying to
> understand​ it. (The type of log entry is aggravating to a guy like me, as
> it's not a specific connection method and without great detail)

A tool that I use a great deal is lsof, as in "lsof -i" which shows me 
every port in use, the PIDs/user driving them, and the remote connection 
IP and port, e.g. (my Pi hostname is "allstar"):

COMMAND     PID            USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
...
asterisk   3764            root    7u  IPv4  30034      0t0  TCP 
localhost.localdomain:5038 (LISTEN)
asterisk   3764            root   17u  IPv4  30038      0t0  UDP *:iax
asterisk   3764            root   18u  IPv4  30042      0t0  UDP *:5198
asterisk   3764            root   19u  IPv4  30043      0t0  UDP *:5199
asterisk   3764            root   72u  IPv4 301140      0t0  TCP 
allstar:34008->ip-68-178-144-151.ip.secureserver.net:targus-getdata 
(SYN_SENT)
sshd      11678            root    3u  IPv4  90101      0t0  TCP 
allstar:rsh-spx->192.168.1.106:60316 (ESTABLISHED)
...

Even more detail is available when run as root. The online manual page 
is informative, as usual.