Hosts With Active Connections

[dg_102]

Does anyone know why am I seeing these IPs in the "Hosts With Active Connections" ?

(unknown) 7.11.160.165 unknown 0 0 1
(unknown) 7.207.116.1 unknown 0 0 1
(unknown) 7.249.43.129 unknown 0 0 0

Thank you,

dg

[nworbnhoj]

This question comes up from time to time in the forum and has not yet drawn a satisfactory explanation. Strangely, it seems to manifest on new installs which makes replication and troubleshooting troublesome.

[dg_102]

Did a search and found this but also without an explanation and also gargoyle related:

https://www.reddit.com/r/AskNetsec/comm ... th_active/

and here on the forum:

viewtopic.php?f=11&t=6406#p25927

and finally something that I can relate as my ISP is a third party to this Rogers company.

http://www.dslreports.com/forum/r269360 ... -by-rogers

That might be a rational explanation.

Thank you,

[nworbnhoj]

Yes that may indeed be part of the explanation - but it still should not show up in the Active Connections list the way it occasionally does.

The other part of the explanation may well be fixed in Gargoyle just a couple of days ago. I fixed a latent bug in the logic for active connections because of another problem that showed up. With a bit of luck I may have killed 2 birds with one stone. This fix will be included in the next beta build from @ispyisail and in the next official Gargoyle release.

[dg_102]

Looking forward to trying the fix, right now I am on:

1.9.X (Built 20160219-0158 git@3969110)

Thank you.