(FROYO) VPN Still Broken (PPTP with encryption)

(FROYO) VPN Still Broken (PPTP with encryption) - Captivate General

Sigh,
AoN

i think this should be in the general section.

What level of encryption is the server using?
Sent from my SAMSUNG-SGH-I897 using XDA App

You server must have some strange encryption, pptp has worked for me since day one

Is there a logfile generated somewhere on the phone, which would tell what level of encryption is being used for a particular vpn server? I'm trying to connect to work.
Thanks,
AoN

anneoneamouse said:
Is there a logfile generated somewhere on the phone, which would tell what level of encryption is being used for a particular vpn server? I'm trying to connect to work.
Thanks,
AoN
Click to expand...
Click to collapse
Same with DG, PPTP with Encryption worked and tested. Logged onto my servers via VNC no problem.

I have always had an issue as well. I think it has to do with routes. I am able to connect but can't ping or route any traffic anything behind the router.
Here's my setup:
-Phone's Wifi IP (eth0): 172.20.21.61
-IP for PPTP VPN connection(ppp0): 10.0.0.2
-Subnet at VPN location: 192.168.1.0/24
Here is my route tables:
Code:
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.1 * 255.255.255.255 UH 0 0 0 ppp0
172.20.21.0 192.168.1.1 255.255.255.128 UG 0 0 0 ppp0
172.20.21.128 192.168.1.1 255.255.255.128 UG 0 0 0 ppp0
172.20.21.0 * 255.255.255.0 U 0 0 0 eth0
Default 192.168.1.1 128.0.0.0 UG 0 0 0 ppp0
128.0.0.0 192.168.1.1 128.0.0.0 UG 0 0 0 ppp0
Default 172.20.21.1 0.0.0.0 UG 0 0 0 eth0
Fyi: The VPN works fine from my desktop and old iPhone.

techniq35 said:
I have always had an issue as well. I think it has to do with routes. I am able to connect but can't ping or route any traffic anything behind the router.
Here's my setup:
-Phone's Wifi IP (eth0): 172.20.21.61
-IP for PPTP VPN connection(ppp0): 10.0.0.2
-Subnet at VPN location: 192.168.1.0/24
Here is my route tables:
Code:
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.1 * 255.255.255.255 UH 0 0 0 ppp0
172.20.21.0 192.168.1.1 255.255.255.128 UG 0 0 0 ppp0
172.20.21.128 192.168.1.1 255.255.255.128 UG 0 0 0 ppp0
172.20.21.0 * 255.255.255.0 U 0 0 0 eth0
Default 192.168.1.1 128.0.0.0 UG 0 0 0 ppp0
128.0.0.0 192.168.1.1 128.0.0.0 UG 0 0 0 ppp0
Default 172.20.21.1 0.0.0.0 UG 0 0 0 eth0
Fyi: The VPN works fine from my desktop and old iPhone.
Click to expand...
Click to collapse
I know that Windows 2008 Server has some weird stuff going on with their VPN servers.... I connect from ATT wireless to an external static ip address on the router which listen/routes the PPTP port to my Windows 2008 Server with external ipaddress for authentication and stuff....
Try using the ATT wireless instead of the 172.20.x.x address.... see if it gets your further....

techniq35 said:
I have always had an issue as well. I think it has to do with routes. I am able to connect but can't ping or route any traffic anything behind the router.
Here's my setup:
-Phone's Wifi IP (eth0): 172.20.21.61
-IP for PPTP VPN connection(ppp0): 10.0.0.2
-Subnet at VPN location: 192.168.1.0/24
Here is my route tables:
Code:
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.1 * 255.255.255.255 UH 0 0 0 ppp0
172.20.21.0 192.168.1.1 255.255.255.128 UG 0 0 0 ppp0
172.20.21.128 192.168.1.1 255.255.255.128 UG 0 0 0 ppp0
172.20.21.0 * 255.255.255.0 U 0 0 0 eth0
Default 192.168.1.1 128.0.0.0 UG 0 0 0 ppp0
128.0.0.0 192.168.1.1 128.0.0.0 UG 0 0 0 ppp0
Default 172.20.21.1 0.0.0.0 UG 0 0 0 eth0
Fyi: The VPN works fine from my desktop and old iPhone.
Click to expand...
Click to collapse
Can you ping the other end of the tunnel? (10.0.0.1, I'm assuming?)
Your gateway for traffic through the tunnel should be something on the same subnet as 10.0.0.2. The 192.168.1.1 wont be reachable because you have no interfaces on that subnet.

Any (recent) luck with this? Seems that ppp wasn't originally compiled with mppe-128 support. The latest update from Samsung (I897UCKB1) hasn't improved things either.
Anyone know whether any of the ROMS here have a recompiled ppp component?
Thanks,
AoN

Related

Android and OpenVPN

Running android-openvpn-settings on Das BAMF 1.8.6 rooted thunderbolt.
My config file:
Code:
remote mine.dyndns.org 443
client
proto tcp
nobind
dev tap
comp-lzo
verb 4
log /sdcard/openvpn/openvpn.log
resolv-retry infinite
persist-key
persist-tun
redirect-gateway def1
dhcp-option DNS 192.168.1.1
route-gateway 192.168.1.1
route-delay 10
ns-cert-type server
key-direction 1
ca "camine.crt"
cert "mine2.crt"
Had to manually add this route for the log file to be free of errors. route-default would cause some route add/del's that would give Invalid Parameter or No Such Process errors since 192.168.1.0 wasnt anywhere in the table. So running this before opening the VPN tunnel got rid of the errors:
Code:
busybox route add -net 192.168.1.0 netmask 255.255.255.0 rmnet_sdio0
Heres what my routing table looks like after android-openvpn-settings runs and says the tunnel is open:
Code:
# busybox route -n
busybox route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
98.249.31.333 192.168.1.1 255.255.255.255 UGH 0 0 0 rmnet_sdio0
98.249.31.333 10.189.54.12 255.255.255.255 UGH 0 0 0 rmnet_sdio0
10.189.54.11 0.0.0.0 255.255.255.240 U 0 0 0 rmnet_sdio0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 rmnet_sdio0
0.0.0.0 192.168.1.1 128.0.0.0 UG 0 0 0 rmnet_sdio0
128.0.0.0 192.168.1.1 128.0.0.0 UG 0 0 0 rmnet_sdio0
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 rmnet_sdio0
0.0.0.0 10.189.54.12 0.0.0.0 UG 0 0 0 rmnet_sdio0
No clue if the table is OK now. One weird thing is I can't ping through tun0 at all. Don't see tun0 in ifconfig either... Did I miss some huge step?
Code:
# ping -c 1 -I tun0 192.168.1.1
ping -c 1 -I tun0 192.168.1.1
ping: unknown iface tun0
only background I have is with that config (except redirect-gateway instead of redirect-gateway def1) used to work on my old WM phone.
Anyone have any ideas? Let me know if I can provide any more details... Ive been racking my brain on this the past couple of days. Out of ideas.

Bump. Any ideas?

Maybe my Tun setup is wrong? Where is tun.ko located on Das BAMF 1.8.6? The location in the android-openvpn-settings just says "tun"

A few things to try:
1) Change the symlinks /system/bin/ifconfig and /system/bin/route to point to /system/xbin/busybox instead of toolbox
2) Once the tunnel is established, try these commands in a terminal:
ip ru del table gprs
ip ru del table wifi

After "connecting" with android-openvpn-settings then running
Code:
netcfg tap0 dhcp
in a terminal openvpn works.
Still have no clue about CM7 built in OpenVPN and the broken tunnel message.

[Q] Enable both wifi and mobile data for multihoming

This might sound like a slightly odd thing to do, but I am trying to enable both wifi and mobile data on an Motorola Xoom pad at the same time. I need both interfaces as I am exploring multihoming of mobile devices. To illustrate the current behavior of the xoom.
sh-4.1# netcfg
...
ppp0 UP 95.209.163.33 255.255.255.255 0x000010d1
sh-4.1# svc wifi enable
sh-4.1# netcfg
...
ppp0 UP 95.209.163.33 255.255.255.255 0x000010d1
wlan0 UP 0.0.0.0 0.0.0.0 0x00001043
sh-4.1# netcfg
...
ppp0 DOWN 0.0.0.0 0.0.0.0 0x00001090
wlan0 UP 130.229.167.92 255.255.192.0 0x00001043
sh-4.1# netcfg
...
wlan0 UP 130.229.167.92 255.255.192.0 0x00001043
It seems that enabling data over wlan0 automatically disables the mobile data. Is there any known way to prevent this and have both interfaces enabled at the same time?
I have root access on the tablet and I am not afraid to write some code if that is what is needed. I just don't know where to start.
ps.
I have tried searching and not found any similar question.
ds.
/Pehr

[Q] VPNC Route Help

So I inadvertently killed my D1 by drowning it in a river and work sent me a new D3.
With a rooted D1, I was able to get VPNC to a Cisco working and <whisper>WiFi tether; I wanted the same usability in the D3. A little trickier getting things set up, but I'm just about there.
With wonderful resources like you people, found a radio tweak, and also that the D3 has tun built in (can see dev/net/tun), so with VPNC widget, got connected, see our Cisco banner text and issued IP in the VPNC log.
However, once connected to VPN, I can't access internet and can't ping any of our internal IPs either...I think my routes are wrong.
But, I don't know enough about setting up the routing table and was hoping someone could steer me in the right direction? I would like to manually adjust them, see if it works, then hopefully script it for after connection.
Not sure what anyone might need, but I'll start with this:
Before...
ip route list
66.174.201.64 dev ppp0 scope link
66.174.201.64 dev ppp0 proto kernel scope link src 10.251.3.122
default via 66.174.201.64 dev ppp0
netcfg
lo UP 127.0.0.1 255.0.0.0 0x00000049
usb0 DOWN 0.0.0.0 0.0.0.0 0x00001002
gether0 DOWN 0.0.0.0 0.0.0.0 0x00001002
sit0 DOWN 0.0.0.0 0.0.0.0 0x00000080
ip6tnl0 DOWN 0.0.0.0 0.0.0.0 0x00000080
tun DOWN 0.0.0.0 0.0.0.0 0x00001002
ppp0 UP 10.251.3.122 255.255.255.255 0x000010d1
After VPN connected...
66.174.201.64 dev ppp0 scope link
66.174.201.64 dev ppp0 proto kernel scope link src 10.251.3.122
default via 66.174.201.64 dev ppp0
netcfg
lo UP 127.0.0.1 255.0.0.0 0x00000049
usb0 DOWN 0.0.0.0 0.0.0.0 0x00001002
gether0 DOWN 0.0.0.0 0.0.0.0 0x00001002
sit0 DOWN 0.0.0.0 0.0.0.0 0x00000080
ip6tnl0 DOWN 0.0.0.0 0.0.0.0 0x00000080
tun DOWN 0.0.0.0 0.0.0.0 0x00001002
tun0 UP 192.168.144.8 255.255.255.255 0x000010d1
ppp0 UP 10.251.3.122 255.255.255.255 0x000010d1
I appreciate anyone taking the time to help me out.

Update...
Apparently, I found my busybox wasn't symlinked properly, so things like grep weren't working...that's why the usual vpnc-script file wasn't updating routes as it normally would. Updated bb and after connecting with VPNC, I now get:
ip route list
<myciscoip> via 66.174.201.64 dev ppp0 src 10.242.253.151 mtu 1500
advmss 1460
66.174.201.64 dev ppp0 scope link
66.174.201.64 dev ppp0 proto kernel scope link src 10.242.253.151
default dev tun0 scope link
netcfg
lo UP 127.0.0.1 255.0.0.0 0x00000049
usb0 DOWN 0.0.0.0 0.0.0.0 0x00001002
gether0 DOWN 0.0.0.0 0.0.0.0 0x00001002
sit0 DOWN 0.0.0.0 0.0.0.0 0x00000080
ip6tnl0 DOWN 0.0.0.0 0.0.0.0 0x00000080
tun DOWN 0.0.0.0 0.0.0.0 0x00001002
ppp0 UP 10.242.253.151 255.255.255.255 0x000010d1
tun0 UP 192.168.144.5 255.255.255.255 0x000010d1
Unfortunately, I still can't reach internet or ping any of our internal IPs? Like I said, I don't know enough about TCP route configuration to know what's missing/wrong from the phone's routing table.
Anyone with some insight?

Interesting...came across this (site wouldn't allow me to post link, so I mucked it a bit): androidforums.com /evo-4g-support-troubleshooting/ 140775-post-froyo-vpn-issues.html
They could connect to VPN if using WiFi, but not 3g. So, I tried connecting to my home WiFi, then VPN to work Cisco on phone...voila! Works fine...ping internal work IPs, facebook is blocked in browser due to our WebSense...just as expected.
So, can't VPN over 3g connection just yet....

Please use the Q&A Forum for questions Thanks
Moving to Q&A

I've got it working in mine by doing the folowing (Thether + 3G):
First try using IP instead of DNS. Otherwise you'll need what I need probably (strip your APN of MMS etc.)
Create a new APN. Only fill in mimimal:
Name: Internet
APN: Internet
Type: Internet
Rest default. Worked for me. Adding MMS proxy etc. Blocks my VPN

I suspect I'm not the only person with a wired network adapter - and some of us may be trying to do things like configure routers, etc, where there's no active DHCP server.
I was in this situation a couple of days ago, configuring a dd-wrt box with DHCP turned off.
The best how-to I found was at this entry at HeadlessAndroid
This could be "old hat" to everybody here (other than me), but, for most of my android devices, if I'm in the terminal, I'm connected via "adb terminal" so I've never needed to do this - and ifcfg does not work the way I'd have expected.
Hope this helps someone...
Networking on a Headless Android System
Android isn't the most intuitive environment for setting up networking on the command line. After playing with several different options here's what I've found.
Summary
# netcfg eth0 dhcp
# route add default gw 192.168.0.1 dev eth0
# setprop net.dns1 208.67.222.222
# setprop net.dns2 208.67.222.220
Details
The Android tools are quite different from the tools found on other embedded Linux systems, so most people I've talked to have had difficulty figuring out what utilities to use and how to use them. The most interesting one is ifconfig. When you type ifconfig on an Android system nothing happens. On a standard busybox or gnu based Linux system you will see the available networking interfaces and their associated settings (ok, technically ifconfig -a will show you that information). Since ifconfig doesn't show anything, most people assume (incorrectly) that it doesn't work.
On my development platform, to set a static IP address, I did the following:
# ifconfig eth0 192.168.0.84 netmask 255.255.255.0
Which didn't give any response, but DID show the following when I did netcfg.
# netcfg
lo UP 127.0.0.1 255.0.0.0 0x00000049
eth0 UP 192.168.0.84 255.255.255.0 0x00001043
usb0 DOWN 0.0.0.0 0.0.0.0 0x00001002
tunl0 DOWN 0.0.0.0 0.0.0.0 0x00000080
gre0 DOWN 0.0.0.0 0.0.0.0 0x00000080
sit0 DOWN 0.0.0.0 0.0.0.0 0x00000080
So what about DHCP you may ask?
# netcfg eth0 dhcp
Which yields the following.
# netcfg
lo UP 127.0.0.1 255.0.0.0 0x00000049
eth0 UP 192.168.0.227 255.255.255.0 0x00001043
usb0 DOWN 0.0.0.0 0.0.0.0 0x00001002
tunl0 DOWN 0.0.0.0 0.0.0.0 0x00000080
gre0 DOWN 0.0.0.0 0.0.0.0 0x00000080
sit0 DOWN 0.0.0.0 0.0.0.0 0x00000080
Just because you have an IP address now doesn't mean the applications on your Android device can get to the network. For that you have to set a default route and set the DNS resolver addresses. Again, with route keep in mind it won't show the usual output that a standard busybox or gnu based embedded Linux system would show.
To set the default route:
# route add default gw 192.168.0.1 dev eth0
And to set the DNS (I'm using OpenDNS addresses here):
# setprop net.dns1 208.67.222.222
# setprop net.dns2 208.67.222.220
And that allows the holy grail of a DNS resolved ping to a domain on the Internet.
# ping google.com
PING google.com (74.125.224.134) 56(84) bytes of data.
64 bytes from nuq04s09-in-f6.1e100.net (74.125.224.134): icmp_seq=1 ttl=57 time=41.5 ms
64 bytes from nuq04s09-in-f6.1e100.net (74.125.224.134): icmp_seq=2 ttl=57 time=43.2 ms
References
I found some great information in the following links.
http://www.anddev.org/advanced_networking_with_android-linux-t155.html
http://elinux.org/Android_Networking
Click to expand...
Click to collapse

Android open ports

My device: nexus5
I have a nonrooted phone and some strange Activity so started searching for something. And found out there was a strange range of ports open. The sesults are below.
Is this normal?
Code:
bullhead:/ $ netstat -a
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 2 0 0.0.0.0:32727 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50039 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50040 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50041 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50042 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50010 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50043 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50011 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50044 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50012 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50045 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50013 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:35678 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50046 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50014 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50047 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50015 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32000 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50048 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50016 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32001 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50049 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50017 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32002 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50050 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50018 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32003 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50051 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50019 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32004 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50052 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50020 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:sip 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32005 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50053 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50021 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32006 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50054 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50022 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32007 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50055 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50023 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32008 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50056 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50024 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32009 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50057 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50025 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32010 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50058 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50026 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32011 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50059 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50027 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:33068 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50060 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50028 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50029 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50030 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50031 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50032 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50033 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:33778 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50034 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:35379 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50035 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50036 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50037 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50038 0.0.0.0:* UNKNOWN
tcp 1 0 localhost:33778 localhost:39544 UNKNOWN
tcp 1 0 localhost:50043 localhost:46517 UNKNOWN
tcp 1 0 localhost:50035 localhost:37912 UNKNOWN
tcp 1 0 localhost:50051 localhost:41505 UNKNOWN
tcp 1 0 localhost:50033 localhost:47411 UNKNOWN
tcp 1 0 localhost:50032 localhost:47838 UNKNOWN
tcp 1 0 localhost:50034 localhost:39121 UNKNOWN
tcp 1 0 localhost:50030 localhost:44684 UNKNOWN
tcp 1 0 localhost:50012 localhost:40480 UNKNOWN
tcp 1 0 localhost:50025 localhost:38841 UNKNOWN
tcp 0 0 10.0.8.1:38692 ams15s29-in-f98.1e100.n TIME_WAIT
tcp 1 0 localhost:50018 localhost:49453 UNKNOWN
tcp 1 0 localhost:32000 localhost:43403 UNKNOWN
tcp 1 0 localhost:50025 localhost:42922 UNKNOWN
tcp 1 0 localhost:50039 localhost:39402 UNKNOWN
tcp 1 0 localhost:32011 localhost:42318 UNKNOWN
tcp 1 0 localhost:50036 localhost:47522 UNKNOWN
tcp 1 0 localhost:32002 localhost:47944 UNKNOWN
tcp 1 0 localhost:50032 localhost:38939 UNKNOWN
tcp 1 0 localhost:50022 localhost:44359 UNKNOWN
tcp 1 0 localhost:50027 localhost:38637 UNKNOWN
tcp 1 0 localhost:50044 localhost:38546 UNKNOWN
tcp 1 0 localhost:50049 localhost:40907 UNKNOWN
tcp 1 0 localhost:50045 localhost:49351 UNKNOWN
tcp 1 0 localhost:50040 localhost:39210 UNKNOWN
tcp 1 0 localhost:32003 localhost:48259 UNKNOWN
tcp 1 0 localhost:32001 localhost:41458 UNKNOWN
tcp 1 0 localhost:50021 localhost:42773 UNKNOWN
tcp 1 0 localhost:32727 localhost:46737 UNKNOWN
tcp 1 0 localhost:32006 localhost:48338 UNKNOWN
tcp 1 0 localhost:50035 localhost:46826 UNKNOWN
tcp 1 0 localhost:50037 localhost:37453 UNKNOWN
tcp 1 0 localhost:50011 localhost:47473 UNKNOWN
tcp 1 0 localhost:35379 localhost:37895 UNKNOWN
tcp 1 0 localhost:50023 localhost:37771 UNKNOWN
tcp 1 0 localhost:50039 localhost:48325 UNKNOWN
tcp 1 0 localhost:50029 localhost:45992 UNKNOWN
tcp 1 0 localhost:50018 localhost:45362 UNKNOWN
tcp 1 0 localhost:50019 localhost:40516 UNKNOWN
tcp 1 0 localhost:32005 localhost:42700 UNKNOWN
tcp 1 0 localhost:50014 localhost:49833 UNKNOWN
tcp 1 0 localhost:50057 localhost:41044 UNKNOWN
tcp 0 1 10.56.217.101:45903 reverse.admeta.com:http FIN_WAIT1
tcp 1 0 localhost:50059 localhost:39135 UNKNOWN
tcp 1 0 localhost:50040 localhost:43299 UNKNOWN
tcp 1 0 localhost:32009 localhost:45895 UNKNOWN
tcp 1 0 localhost:50041 localhost:42841 UNKNOWN
tcp 1 0 localhost:32000 localhost:42603 UNKNOWN
tcp 1 0 localhost:50050 localhost:49550 UNKNOWN
tcp 1 0 localhost:50014 localhost:45723 UNKNOWN
tcp 1 0 localhost:50055 localhost:41823 UNKNOWN
tcp 1 0 localhost:50020 localhost:42528 UNKNOWN
tcp 1 0 localhost:50016 localhost:49387 UNKNOWN
tcp 1 0 localhost:50022 localhost:48447 UNKNOWN
tcp 0 0 10.56.217.101:47621 ams16s21-in-f5.1e100.ne ESTABLISHED
tcp 1 0 localhost:50046 localhost:44034 UNKNOWN
tcp 1 0 localhost:32002 localhost:39033 UNKNOWN
tcp 1 0 localhost:32004 localhost:42834 UNKNOWN
tcp 1 0 localhost:33068 localhost:41965 UNKNOWN
tcp 1 0 localhost:50042 localhost:43549 UNKNOWN
tcp 1 0 localhost:50011 localhost:38565 UNKNOWN
tcp 1 0 localhost:32009 localhost:41001 UNKNOWN
tcp 1 0 localhost:50055 localhost:37735 UNKNOWN
tcp 0 0 10.56.217.101:45027 ec2-54-235-145-74.compu ESTABLISHED
tcp 1 0 localhost:50015 localhost:48374 UNKNOWN
tcp 1 0 localhost:33068 localhost:37870 UNKNOWN
tcp 1 0 localhost:50049 localhost:44986 UNKNOWN
tcp 1 0 localhost:50059 localhost:48041 UNKNOWN
tcp 1 0 localhost:50038 localhost:43859 UNKNOWN
tcp 1 0 localhost:50041 localhost:46943 UNKNOWN
tcp 1 0 localhost:50020 localhost:38432 UNKNOWN
tcp 0 1 10.56.217.101:45999 reverse.admeta.com:http FIN_WAIT1
tcp 1 0 localhost:50027 localhost:47554 UNKNOWN
tcp 1 0 localhost:32002 localhost:47140 UNKNOWN
tcp 1 0 localhost:32001 localhost:45551 UNKNOWN
tcp 1 0 localhost:32011 localhost:41517 UNKNOWN
tcp 1 0 localhost:50056 localhost:38914 UNKNOWN
tcp 1 0 localhost:33778 localhost:48449 UNKNOWN
tcp 1 0 localhost:32007 localhost:39203 UNKNOWN
tcp 1 0 localhost:50024 localhost:38333 UNKNOWN
tcp 1 0 localhost:32008 localhost:48777 UNKNOWN
tcp 0 0 10.56.217.101:48536 cache.google.com:https ESTABLISHED
tcp 1 0 localhost:50057 localhost:49952 UNKNOWN
tcp 1 0 localhost:50033 localhost:43315 UNKNOWN
tcp 1 0 localhost:35678 localhost:39993 UNKNOWN
tcp 1 0 localhost:50028 localhost:49501 UNKNOWN
tcp 1 0 localhost:32008 localhost:44684 UNKNOWN
tcp 0 0 10.56.217.101:48738 ed-in-f188.1e100.net:52 ESTABLISHED
tcp 1 0 localhost:32010 localhost:41123 UNKNOWN
tcp 1 0 localhost:32006 localhost:43446 UNKNOWN
tcp 1 0 localhost:50012 localhost:49395 UNKNOWN
tcp 1 0 localhost:32007 localhost:44097 UNKNOWN
tcp 1 0 localhost:50047 localhost:40564 UNKNOWN
tcp 1 0 localhost:50013 localhost:46654 UNKNOWN
tcp 1 0 localhost:50034 localhost:43214 UNKNOWN
tcp 0 0 10.56.217.101:40554 104.31.10.172:http ESTABLISHED
tcp 1 0 localhost:32002 localhost:46876 UNKNOWN
tcp 1 0 localhost:50058 localhost:44035 UNKNOWN
tcp 1 0 localhost:32006 localhost:44245 UNKNOWN
tcp 1 0 localhost:50046 localhost:39937 UNKNOWN
tcp 1 0 localhost:32005 localhost:38609 UNKNOWN
tcp 1 0 localhost:50043 localhost:42403 UNKNOWN
tcp 1 0 localhost:32000 localhost:47506 UNKNOWN
tcp 1 0 localhost:50047 localhost:44648 UNKNOWN
tcp 1 0 localhost:50045 localhost:45262 UNKNOWN
tcp 1 0 localhost:32004 localhost:42033 UNKNOWN
tcp 0 1 10.56.217.101:45904 reverse.admeta.com:http FIN_WAIT1
tcp 1 0 localhost:50054 localhost:42272 UNKNOWN
tcp 1 0 localhost:50058 localhost:39957 UNKNOWN
tcp 1 0 localhost:32003 localhost:47459 UNKNOWN
tcp 1 0 localhost:32004 localhost:46927 UNKNOWN
tcp 1 0 localhost:50056 localhost:47832 UNKNOWN
tcp 1 0 localhost:50050 localhost:45458 UNKNOWN
tcp 1 0 localhost:32003 localhost:47192 UNKNOWN
tcp 1 0 localhost:50017 localhost:40445 UNKNOWN
tcp 1 0 localhost:50026 localhost:37444 UNKNOWN
tcp 1 0 localhost:50028 localhost:45416 UNKNOWN
tcp 1 0 localhost:32010 localhost:45206 UNKNOWN
tcp 1 0 localhost:35678 localhost:44089 UNKNOWN
tcp 1 0 localhost:50031 localhost:42962 UNKNOWN
tcp 1 0 localhost:50048 localhost:37456 UNKNOWN
tcp 1 0 localhost:50029 localhost:41896 UNKNOWN
tcp 1 0 localhost:32010 localhost:40323 UNKNOWN
tcp 0 0 10.56.217.101:41285 supersonic.web.va.us.xd TIME_WAIT
tcp 1 0 localhost:50054 localhost:46374 UNKNOWN
tcp 1 0 localhost:50042 localhost:47656 UNKNOWN
tcp 1 0 localhost:50021 localhost:38684 UNKNOWN
tcp 1 0 localhost:32004 localhost:41766 UNKNOWN
tcp 1 0 localhost:50060 localhost:41492 UNKNOWN
tcp 1 0 localhost:32001 localhost:40391 UNKNOWN
tcp 1 0 localhost:50044 localhost:42642 UNKNOWN
tcp 1 0 localhost:50016 localhost:40492 UNKNOWN
tcp 1 0 localhost:sip localhost:43072 UNKNOWN
tcp 1 0 localhost:50010 localhost:40772 UNKNOWN
tcp 1 0 localhost:32007 localhost:40000 UNKNOWN
tcp 0 0 10.0.8.1:43200 supersonic.web.va.us.xd TIME_WAIT
tcp 1 0 localhost:50037 localhost:41537 UNKNOWN
tcp 1 0 localhost:50013 localhost:42570 UNKNOWN
tcp 1 0 localhost:50031 localhost:47051 UNKNOWN
tcp 1 0 localhost:50036 localhost:43419 UNKNOWN
tcp 1 0 localhost:50017 localhost:49359 UNKNOWN
tcp 1 0 localhost:50023 localhost:46682 UNKNOWN
tcp 1 0 localhost:50052 localhost:41936 UNKNOWN
tcp 1 0 localhost:50015 localhost:44263 UNKNOWN
tcp 1 0 localhost:32008 localhost:43880 UNKNOWN
tcp 1 0 localhost:50019 localhost:49395 UNKNOWN
tcp 1 0 localhost:32000 localhost:42336 UNKNOWN
tcp 1 0 localhost:50053 localhost:40704 UNKNOWN
tcp 1 0 localhost:50026 localhost:41540 UNKNOWN
tcp 1 0 localhost:50053 localhost:44798 UNKNOWN
tcp 1 0 localhost:sip localhost:42862 UNKNOWN
tcp 1 0 localhost:32727 localhost:42641 UNKNOWN
tcp 1 0 localhost:50060 localhost:45600 UNKNOWN
tcp 1 0 localhost:50052 localhost:46041 UNKNOWN
tcp 1 0 localhost:50051 localhost:37408 UNKNOWN
tcp 1 0 localhost:50038 localhost:47943 UNKNOWN
tcp 1 0 localhost:50024 localhost:42435 UNKNOWN
tcp 1 0 localhost:35379 localhost:41992 UNKNOWN
tcp 1 0 localhost:32001 localhost:40656 UNKNOWN
tcp 1 0 localhost:50048 localhost:46382 UNKNOWN
tcp 1 0 localhost:32009 localhost:41805 UNKNOWN
tcp 1 0 localhost:32011 localhost:46409 UNKNOWN
tcp 1 0 localhost:50030 localhost:48771 UNKNOWN
tcp 1 0 localhost:32005 localhost:37807 UNKNOWN
tcp 1 0 localhost:50010 localhost:49687 UNKNOWN
tcp 1 0 localhost:32003 localhost:39352 UNKNOWN
tcp 0 0 :::50039 :::* UNKNOWN
tcp 0 0 :::50040 :::* UNKNOWN
tcp 0 0 :::50041 :::* UNKNOWN
tcp 0 0 :::50042 :::* UNKNOWN
tcp 0 0 :::50010 :::* UNKNOWN
tcp 0 0 :::32859 :::* UNKNOWN
tcp 0 0 :::50043 :::* UNKNOWN
tcp 0 0 :::50011 :::* UNKNOWN
tcp 0 0 :::50044 :::* UNKNOWN
tcp 0 0 :::50012 :::* UNKNOWN
tcp 0 0 :::35869 :::* UNKNOWN
tcp 0 0 :::50045 :::* UNKNOWN
tcp 0 0 :::50013 :::* UNKNOWN
tcp 0 0 :::50046 :::* UNKNOWN
tcp 0 0 :::50014 :::* UNKNOWN
tcp 0 0 :::50047 :::* UNKNOWN
tcp 0 0 :::50015 :::* UNKNOWN
tcp 0 0 :::32000 :::* UNKNOWN
tcp 0 0 :::50048 :::* UNKNOWN
tcp 0 0 :::50016 :::* UNKNOWN
tcp 0 0 :::32001 :::* UNKNOWN
tcp 0 0 :::50049 :::* UNKNOWN
tcp 0 0 :::50017 :::* UNKNOWN
tcp 0 0 :::32706 :::* UNKNOWN
tcp 0 0 :::32002 :::* UNKNOWN
tcp 0 0 :::50050 :::* UNKNOWN
tcp 0 0 :::50018 :::* UNKNOWN
tcp 0 0 :::32003 :::* UNKNOWN
tcp 0 0 :::50051 :::* UNKNOWN
tcp 0 0 :::50019 :::* UNKNOWN
tcp 0 0 :::32004 :::* UNKNOWN
tcp 0 0 :::50052 :::* UNKNOWN
tcp 0 0 :::50020 :::* UNKNOWN
tcp 0 0 :::sip :::* UNKNOWN
tcp 0 0 :::35941 :::* UNKNOWN
tcp 0 0 :::32005 :::* UNKNOWN
tcp 0 0 :::50053 :::* UNKNOWN
tcp 0 0 :::50021 :::* UNKNOWN
tcp 0 0 :::32006 :::* UNKNOWN
tcp 0 0 :::50054 :::* UNKNOWN
tcp 0 0 :::50022 :::* UNKNOWN
tcp 0 0 :::32007 :::* UNKNOWN
tcp 0 0 :::50055 :::* UNKNOWN
tcp 0 0 :::50023 :::* UNKNOWN
tcp 0 0 :::32008 :::* UNKNOWN
tcp 0 0 :::50056 :::* UNKNOWN
tcp 0 0 :::50024 :::* UNKNOWN
tcp 0 0 :::32009 :::* UNKNOWN
tcp 0 0 :::50057 :::* UNKNOWN
tcp 0 0 :::50025 :::* UNKNOWN
tcp 0 0 :::32010 :::* UNKNOWN
tcp 0 0 :::50058 :::* UNKNOWN
tcp 0 0 :::50026 :::* UNKNOWN
tcp 0 0 :::32011 :::* UNKNOWN
tcp 0 0 :::50059 :::* UNKNOWN
tcp 0 0 :::50027 :::* UNKNOWN
tcp 0 0 :::50060 :::* UNKNOWN
tcp 0 0 :::50028 :::* UNKNOWN
tcp 0 0 :::50029 :::* UNKNOWN
tcp 0 0 :::50030 :::* UNKNOWN
tcp 0 0 :::50031 :::* UNKNOWN
tcp 0 0 :::32880 :::* UNKNOWN
tcp 0 0 :::50032 :::* UNKNOWN
tcp 0 0 :::50033 :::* UNKNOWN
tcp 0 0 :::50034 :::* UNKNOWN
tcp 0 0 :::50035 :::* UNKNOWN
tcp 0 0 :::50036 :::* UNKNOWN
tcp 0 0 :::50037 :::* UNKNOWN
tcp 0 0 :::50038 :::* UNKNOWN
tcp 0 1 :::44582 localhost:9033 SYN_SENT
udp 0 0 0.0.0.0:32000 0.0.0.0:* UNKNOWN
udp 0 0 0.0.0.0:32001 0.0.0.0:* UNKNOWN
udp 0 0 0.0.0.0:32002 0.0.0.0:* UNKNOWN
udp 0 0 0.0.0.0:32003 0.0.0.0:* UNKNOWN
And here udp connections continue

bomza7 said:
My device: nexus5
I have a nonrooted phone and some strange Activity so started searching for something. And found out there was a strange range of ports open. The sesults are below.
Is this normal?
Code:
bullhead:/ $ netstat -a
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 2 0 0.0.0.0:32727 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50039 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50040 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50041 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50042 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50010 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50043 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50011 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50044 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50012 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50045 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50013 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:35678 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50046 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50014 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50047 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50015 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32000 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50048 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50016 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32001 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50049 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50017 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32002 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50050 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50018 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32003 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50051 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50019 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:32004 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50052 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50020 0.0.0.0:* UNKNOWN
tcp 4 0 0.0.0.0:sip 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32005 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50053 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50021 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32006 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50054 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50022 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32007 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50055 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50023 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32008 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50056 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50024 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32009 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50057 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50025 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32010 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50058 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50026 0.0.0.0:* UNKNOWN
tcp 3 0 0.0.0.0:32011 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50059 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50027 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:33068 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50060 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50028 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50029 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50030 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50031 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50032 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50033 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:33778 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50034 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:35379 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50035 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50036 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50037 0.0.0.0:* UNKNOWN
tcp 2 0 0.0.0.0:50038 0.0.0.0:* UNKNOWN
tcp 1 0 localhost:33778 localhost:39544 UNKNOWN
tcp 1 0 localhost:50043 localhost:46517 UNKNOWN
tcp 1 0 localhost:50035 localhost:37912 UNKNOWN
tcp 1 0 localhost:50051 localhost:41505 UNKNOWN
tcp 1 0 localhost:50033 localhost:47411 UNKNOWN
tcp 1 0 localhost:50032 localhost:47838 UNKNOWN
tcp 1 0 localhost:50034 localhost:39121 UNKNOWN
tcp 1 0 localhost:50030 localhost:44684 UNKNOWN
tcp 1 0 localhost:50012 localhost:40480 UNKNOWN
tcp 1 0 localhost:50025 localhost:38841 UNKNOWN
tcp 0 0 10.0.8.1:38692 ams15s29-in-f98.1e100.n TIME_WAIT
tcp 1 0 localhost:50018 localhost:49453 UNKNOWN
tcp 1 0 localhost:32000 localhost:43403 UNKNOWN
tcp 1 0 localhost:50025 localhost:42922 UNKNOWN
tcp 1 0 localhost:50039 localhost:39402 UNKNOWN
tcp 1 0 localhost:32011 localhost:42318 UNKNOWN
tcp 1 0 localhost:50036 localhost:47522 UNKNOWN
tcp 1 0 localhost:32002 localhost:47944 UNKNOWN
tcp 1 0 localhost:50032 localhost:38939 UNKNOWN
tcp 1 0 localhost:50022 localhost:44359 UNKNOWN
tcp 1 0 localhost:50027 localhost:38637 UNKNOWN
tcp 1 0 localhost:50044 localhost:38546 UNKNOWN
tcp 1 0 localhost:50049 localhost:40907 UNKNOWN
tcp 1 0 localhost:50045 localhost:49351 UNKNOWN
tcp 1 0 localhost:50040 localhost:39210 UNKNOWN
tcp 1 0 localhost:32003 localhost:48259 UNKNOWN
tcp 1 0 localhost:32001 localhost:41458 UNKNOWN
tcp 1 0 localhost:50021 localhost:42773 UNKNOWN
tcp 1 0 localhost:32727 localhost:46737 UNKNOWN
tcp 1 0 localhost:32006 localhost:48338 UNKNOWN
tcp 1 0 localhost:50035 localhost:46826 UNKNOWN
tcp 1 0 localhost:50037 localhost:37453 UNKNOWN
tcp 1 0 localhost:50011 localhost:47473 UNKNOWN
tcp 1 0 localhost:35379 localhost:37895 UNKNOWN
tcp 1 0 localhost:50023 localhost:37771 UNKNOWN
tcp 1 0 localhost:50039 localhost:48325 UNKNOWN
tcp 1 0 localhost:50029 localhost:45992 UNKNOWN
tcp 1 0 localhost:50018 localhost:45362 UNKNOWN
tcp 1 0 localhost:50019 localhost:40516 UNKNOWN
tcp 1 0 localhost:32005 localhost:42700 UNKNOWN
tcp 1 0 localhost:50014 localhost:49833 UNKNOWN
tcp 1 0 localhost:50057 localhost:41044 UNKNOWN
tcp 0 1 10.56.217.101:45903 reverse.admeta.com:http FIN_WAIT1
tcp 1 0 localhost:50059 localhost:39135 UNKNOWN
tcp 1 0 localhost:50040 localhost:43299 UNKNOWN
tcp 1 0 localhost:32009 localhost:45895 UNKNOWN
tcp 1 0 localhost:50041 localhost:42841 UNKNOWN
tcp 1 0 localhost:32000 localhost:42603 UNKNOWN
tcp 1 0 localhost:50050 localhost:49550 UNKNOWN
tcp 1 0 localhost:50014 localhost:45723 UNKNOWN
tcp 1 0 localhost:50055 localhost:41823 UNKNOWN
tcp 1 0 localhost:50020 localhost:42528 UNKNOWN
tcp 1 0 localhost:50016 localhost:49387 UNKNOWN
tcp 1 0 localhost:50022 localhost:48447 UNKNOWN
tcp 0 0 10.56.217.101:47621 ams16s21-in-f5.1e100.ne ESTABLISHED
tcp 1 0 localhost:50046 localhost:44034 UNKNOWN
tcp 1 0 localhost:32002 localhost:39033 UNKNOWN
tcp 1 0 localhost:32004 localhost:42834 UNKNOWN
tcp 1 0 localhost:33068 localhost:41965 UNKNOWN
tcp 1 0 localhost:50042 localhost:43549 UNKNOWN
tcp 1 0 localhost:50011 localhost:38565 UNKNOWN
tcp 1 0 localhost:32009 localhost:41001 UNKNOWN
tcp 1 0 localhost:50055 localhost:37735 UNKNOWN
tcp 0 0 10.56.217.101:45027 ec2-54-235-145-74.compu ESTABLISHED
tcp 1 0 localhost:50015 localhost:48374 UNKNOWN
tcp 1 0 localhost:33068 localhost:37870 UNKNOWN
tcp 1 0 localhost:50049 localhost:44986 UNKNOWN
tcp 1 0 localhost:50059 localhost:48041 UNKNOWN
tcp 1 0 localhost:50038 localhost:43859 UNKNOWN
tcp 1 0 localhost:50041 localhost:46943 UNKNOWN
tcp 1 0 localhost:50020 localhost:38432 UNKNOWN
tcp 0 1 10.56.217.101:45999 reverse.admeta.com:http FIN_WAIT1
tcp 1 0 localhost:50027 localhost:47554 UNKNOWN
tcp 1 0 localhost:32002 localhost:47140 UNKNOWN
tcp 1 0 localhost:32001 localhost:45551 UNKNOWN
tcp 1 0 localhost:32011 localhost:41517 UNKNOWN
tcp 1 0 localhost:50056 localhost:38914 UNKNOWN
tcp 1 0 localhost:33778 localhost:48449 UNKNOWN
tcp 1 0 localhost:32007 localhost:39203 UNKNOWN
tcp 1 0 localhost:50024 localhost:38333 UNKNOWN
tcp 1 0 localhost:32008 localhost:48777 UNKNOWN
tcp 0 0 10.56.217.101:48536 cache.google.com:https ESTABLISHED
tcp 1 0 localhost:50057 localhost:49952 UNKNOWN
tcp 1 0 localhost:50033 localhost:43315 UNKNOWN
tcp 1 0 localhost:35678 localhost:39993 UNKNOWN
tcp 1 0 localhost:50028 localhost:49501 UNKNOWN
tcp 1 0 localhost:32008 localhost:44684 UNKNOWN
tcp 0 0 10.56.217.101:48738 ed-in-f188.1e100.net:52 ESTABLISHED
tcp 1 0 localhost:32010 localhost:41123 UNKNOWN
tcp 1 0 localhost:32006 localhost:43446 UNKNOWN
tcp 1 0 localhost:50012 localhost:49395 UNKNOWN
tcp 1 0 localhost:32007 localhost:44097 UNKNOWN
tcp 1 0 localhost:50047 localhost:40564 UNKNOWN
tcp 1 0 localhost:50013 localhost:46654 UNKNOWN
tcp 1 0 localhost:50034 localhost:43214 UNKNOWN
tcp 0 0 10.56.217.101:40554 104.31.10.172:http ESTABLISHED
tcp 1 0 localhost:32002 localhost:46876 UNKNOWN
tcp 1 0 localhost:50058 localhost:44035 UNKNOWN
tcp 1 0 localhost:32006 localhost:44245 UNKNOWN
tcp 1 0 localhost:50046 localhost:39937 UNKNOWN
tcp 1 0 localhost:32005 localhost:38609 UNKNOWN
tcp 1 0 localhost:50043 localhost:42403 UNKNOWN
tcp 1 0 localhost:32000 localhost:47506 UNKNOWN
tcp 1 0 localhost:50047 localhost:44648 UNKNOWN
tcp 1 0 localhost:50045 localhost:45262 UNKNOWN
tcp 1 0 localhost:32004 localhost:42033 UNKNOWN
tcp 0 1 10.56.217.101:45904 reverse.admeta.com:http FIN_WAIT1
tcp 1 0 localhost:50054 localhost:42272 UNKNOWN
tcp 1 0 localhost:50058 localhost:39957 UNKNOWN
tcp 1 0 localhost:32003 localhost:47459 UNKNOWN
tcp 1 0 localhost:32004 localhost:46927 UNKNOWN
tcp 1 0 localhost:50056 localhost:47832 UNKNOWN
tcp 1 0 localhost:50050 localhost:45458 UNKNOWN
tcp 1 0 localhost:32003 localhost:47192 UNKNOWN
tcp 1 0 localhost:50017 localhost:40445 UNKNOWN
tcp 1 0 localhost:50026 localhost:37444 UNKNOWN
tcp 1 0 localhost:50028 localhost:45416 UNKNOWN
tcp 1 0 localhost:32010 localhost:45206 UNKNOWN
tcp 1 0 localhost:35678 localhost:44089 UNKNOWN
tcp 1 0 localhost:50031 localhost:42962 UNKNOWN
tcp 1 0 localhost:50048 localhost:37456 UNKNOWN
tcp 1 0 localhost:50029 localhost:41896 UNKNOWN
tcp 1 0 localhost:32010 localhost:40323 UNKNOWN
tcp 0 0 10.56.217.101:41285 supersonic.web.va.us.xd TIME_WAIT
tcp 1 0 localhost:50054 localhost:46374 UNKNOWN
tcp 1 0 localhost:50042 localhost:47656 UNKNOWN
tcp 1 0 localhost:50021 localhost:38684 UNKNOWN
tcp 1 0 localhost:32004 localhost:41766 UNKNOWN
tcp 1 0 localhost:50060 localhost:41492 UNKNOWN
tcp 1 0 localhost:32001 localhost:40391 UNKNOWN
tcp 1 0 localhost:50044 localhost:42642 UNKNOWN
tcp 1 0 localhost:50016 localhost:40492 UNKNOWN
tcp 1 0 localhost:sip localhost:43072 UNKNOWN
tcp 1 0 localhost:50010 localhost:40772 UNKNOWN
tcp 1 0 localhost:32007 localhost:40000 UNKNOWN
tcp 0 0 10.0.8.1:43200 supersonic.web.va.us.xd TIME_WAIT
tcp 1 0 localhost:50037 localhost:41537 UNKNOWN
tcp 1 0 localhost:50013 localhost:42570 UNKNOWN
tcp 1 0 localhost:50031 localhost:47051 UNKNOWN
tcp 1 0 localhost:50036 localhost:43419 UNKNOWN
tcp 1 0 localhost:50017 localhost:49359 UNKNOWN
tcp 1 0 localhost:50023 localhost:46682 UNKNOWN
tcp 1 0 localhost:50052 localhost:41936 UNKNOWN
tcp 1 0 localhost:50015 localhost:44263 UNKNOWN
tcp 1 0 localhost:32008 localhost:43880 UNKNOWN
tcp 1 0 localhost:50019 localhost:49395 UNKNOWN
tcp 1 0 localhost:32000 localhost:42336 UNKNOWN
tcp 1 0 localhost:50053 localhost:40704 UNKNOWN
tcp 1 0 localhost:50026 localhost:41540 UNKNOWN
tcp 1 0 localhost:50053 localhost:44798 UNKNOWN
tcp 1 0 localhost:sip localhost:42862 UNKNOWN
tcp 1 0 localhost:32727 localhost:42641 UNKNOWN
tcp 1 0 localhost:50060 localhost:45600 UNKNOWN
tcp 1 0 localhost:50052 localhost:46041 UNKNOWN
tcp 1 0 localhost:50051 localhost:37408 UNKNOWN
tcp 1 0 localhost:50038 localhost:47943 UNKNOWN
tcp 1 0 localhost:50024 localhost:42435 UNKNOWN
tcp 1 0 localhost:35379 localhost:41992 UNKNOWN
tcp 1 0 localhost:32001 localhost:40656 UNKNOWN
tcp 1 0 localhost:50048 localhost:46382 UNKNOWN
tcp 1 0 localhost:32009 localhost:41805 UNKNOWN
tcp 1 0 localhost:32011 localhost:46409 UNKNOWN
tcp 1 0 localhost:50030 localhost:48771 UNKNOWN
tcp 1 0 localhost:32005 localhost:37807 UNKNOWN
tcp 1 0 localhost:50010 localhost:49687 UNKNOWN
tcp 1 0 localhost:32003 localhost:39352 UNKNOWN
tcp 0 0 :::50039 :::* UNKNOWN
tcp 0 0 :::50040 :::* UNKNOWN
tcp 0 0 :::50041 :::* UNKNOWN
tcp 0 0 :::50042 :::* UNKNOWN
tcp 0 0 :::50010 :::* UNKNOWN
tcp 0 0 :::32859 :::* UNKNOWN
tcp 0 0 :::50043 :::* UNKNOWN
tcp 0 0 :::50011 :::* UNKNOWN
tcp 0 0 :::50044 :::* UNKNOWN
tcp 0 0 :::50012 :::* UNKNOWN
tcp 0 0 :::35869 :::* UNKNOWN
tcp 0 0 :::50045 :::* UNKNOWN
tcp 0 0 :::50013 :::* UNKNOWN
tcp 0 0 :::50046 :::* UNKNOWN
tcp 0 0 :::50014 :::* UNKNOWN
tcp 0 0 :::50047 :::* UNKNOWN
tcp 0 0 :::50015 :::* UNKNOWN
tcp 0 0 :::32000 :::* UNKNOWN
tcp 0 0 :::50048 :::* UNKNOWN
tcp 0 0 :::50016 :::* UNKNOWN
tcp 0 0 :::32001 :::* UNKNOWN
tcp 0 0 :::50049 :::* UNKNOWN
tcp 0 0 :::50017 :::* UNKNOWN
tcp 0 0 :::32706 :::* UNKNOWN
tcp 0 0 :::32002 :::* UNKNOWN
tcp 0 0 :::50050 :::* UNKNOWN
tcp 0 0 :::50018 :::* UNKNOWN
tcp 0 0 :::32003 :::* UNKNOWN
tcp 0 0 :::50051 :::* UNKNOWN
tcp 0 0 :::50019 :::* UNKNOWN
tcp 0 0 :::32004 :::* UNKNOWN
tcp 0 0 :::50052 :::* UNKNOWN
tcp 0 0 :::50020 :::* UNKNOWN
tcp 0 0 :::sip :::* UNKNOWN
tcp 0 0 :::35941 :::* UNKNOWN
tcp 0 0 :::32005 :::* UNKNOWN
tcp 0 0 :::50053 :::* UNKNOWN
tcp 0 0 :::50021 :::* UNKNOWN
tcp 0 0 :::32006 :::* UNKNOWN
tcp 0 0 :::50054 :::* UNKNOWN
tcp 0 0 :::50022 :::* UNKNOWN
tcp 0 0 :::32007 :::* UNKNOWN
tcp 0 0 :::50055 :::* UNKNOWN
tcp 0 0 :::50023 :::* UNKNOWN
tcp 0 0 :::32008 :::* UNKNOWN
tcp 0 0 :::50056 :::* UNKNOWN
tcp 0 0 :::50024 :::* UNKNOWN
tcp 0 0 :::32009 :::* UNKNOWN
tcp 0 0 :::50057 :::* UNKNOWN
tcp 0 0 :::50025 :::* UNKNOWN
tcp 0 0 :::32010 :::* UNKNOWN
tcp 0 0 :::50058 :::* UNKNOWN
tcp 0 0 :::50026 :::* UNKNOWN
tcp 0 0 :::32011 :::* UNKNOWN
tcp 0 0 :::50059 :::* UNKNOWN
tcp 0 0 :::50027 :::* UNKNOWN
tcp 0 0 :::50060 :::* UNKNOWN
tcp 0 0 :::50028 :::* UNKNOWN
tcp 0 0 :::50029 :::* UNKNOWN
tcp 0 0 :::50030 :::* UNKNOWN
tcp 0 0 :::50031 :::* UNKNOWN
tcp 0 0 :::32880 :::* UNKNOWN
tcp 0 0 :::50032 :::* UNKNOWN
tcp 0 0 :::50033 :::* UNKNOWN
tcp 0 0 :::50034 :::* UNKNOWN
tcp 0 0 :::50035 :::* UNKNOWN
tcp 0 0 :::50036 :::* UNKNOWN
tcp 0 0 :::50037 :::* UNKNOWN
tcp 0 0 :::50038 :::* UNKNOWN
tcp 0 1 :::44582 localhost:9033 SYN_SENT
udp 0 0 0.0.0.0:32000 0.0.0.0:* UNKNOWN
udp 0 0 0.0.0.0:32001 0.0.0.0:* UNKNOWN
udp 0 0 0.0.0.0:32002 0.0.0.0:* UNKNOWN
udp 0 0 0.0.0.0:32003 0.0.0.0:* UNKNOWN
And here udp connections continue
Click to expand...
Click to collapse
I'm having the same problem on my rooted nexus 6p. It doesnt matter what rom I'm using the problem always comes back. When I run netstat -tnap it shows netmgrd as the culprit, as a very short term fix I've deleted /vendor/bin/netmgrd and the open ports are now closed. Deleting netmgrd I'd not recommend of course as it disables your sim card making the radio completely inoperable.
That's weird no one else has chimed in, I'm sure this must be affecting many more users but the just haven't ran a port scan and noticed it yet. If anyone has any ideas about a real fix please comment.

Same here with rooted nexus 6p...
I have no clue about any reason....
Looks somewhat vulnerable...

Database Info

welcome