netstat showing unknown connections

dagger1x

off topic. Everytime I run netstat -a I get 4 or 5 conn4ections to a site called theplanet.com. I looked its some kind of server OS site. Any idea why thats always open

gabrielbtoledo

You could run netstat with the switch -b to see if there is an executable behind of the connection.
Also with the switch -o you could see the process id behind of the connection.
It could be spyware, p2p connections or something else.
It doesn't hurt as well to use the switch -n and take a look of the port and address being used. Sometimes you can norrow down your search just by the port number.
There are 2 applications that I use that perform the same function as the netstat utility, however is a GUI mode.
Aports and I think the other one is X-Netstat. I will check the exactly name when I get home.
EDIT: Yeah, X-NetStat and Active Ports are the applications I use at home.

sprkymrk

I agree, probably spyware. Netstat -aonb as gabrielbtoledo mentioned will give you more info.