Google calling home from my system, what is the package?

7 messages Options
Embed this post
Permalink
stan-7

Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
Hi,

I've been noticing that my modem lights would flash as if receiving or
sending data when the system was idle for IO.  I could never find what
was doing this.

Today I happened to have iftop running and noticed the modem lights
flashing.  I was able to find the domain name of the other end of the
interaction - nuq04s01-in-f132.e100.net.  I did a ping and then a whois
lookup on the IP address 74.125.19.132 and it turns out this is
google.  

I don't want such calling home occurring on my system. How can I find
out what is doing this and eliminate it or stop it from calling home?

--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Craig White

Re: Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
On Thu, 2009-11-05 at 09:04 -0700, stan wrote:

> Hi,
>
> I've been noticing that my modem lights would flash as if receiving or
> sending data when the system was idle for IO.  I could never find what
> was doing this.
>
> Today I happened to have iftop running and noticed the modem lights
> flashing.  I was able to find the domain name of the other end of the
> interaction - nuq04s01-in-f132.e100.net.  I did a ping and then a whois
> lookup on the IP address 74.125.19.132 and it turns out this is
> google.  
>
> I don't want such calling home occurring on my system. How can I find
> out what is doing this and eliminate it or stop it from calling home?
----
did you install google-gadgets package? do you have a browser window
open?

Craig


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Patrick O'Callaghan-2

Re: Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
In reply to this post by stan-7
On Thu, 2009-11-05 at 09:04 -0700, stan wrote:

> Hi,
>
> I've been noticing that my modem lights would flash as if receiving or
> sending data when the system was idle for IO.  I could never find what
> was doing this.
>
> Today I happened to have iftop running and noticed the modem lights
> flashing.  I was able to find the domain name of the other end of the
> interaction - nuq04s01-in-f132.e100.net.  I did a ping and then a whois
> lookup on the IP address 74.125.19.132 and it turns out this is
> google.  
>
> I don't want such calling home occurring on my system. How can I find
> out what is doing this and eliminate it or stop it from calling home?

Use "netstat --protocol inet" to see what ports at your end are being
used for this. Copy the "Local Address" field into "lsof -i @<address>"
to see what process is doing it.

poc

--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
stan-7

Re: Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
In reply to this post by Craig White
On Thu, 05 Nov 2009 09:11:10 -0700
Craig White <[hidden email]> wrote:


> ----
> did you install google-gadgets package? do you have a browser window
> open?

Yes to both.  I also see something called google-perftools.  

I'll remove all the google stuff.

Thanks for your response.

--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
stan-7

Re: Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
In reply to this post by Patrick O'Callaghan-2
On Thu, 05 Nov 2009 11:47:23 -0430
"Patrick O'Callaghan" <[hidden email]> wrote:

>
> Use "netstat --protocol inet" to see what ports at your end are being
> used for this. Copy the "Local Address" field into "lsof -i
> @<address>" to see what process is doing it.

Thanks for this.  It will be useful.  As I said to Craig, I'm going to
remove all the google stuff, but this is still good information.

--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
tim-9-3

Re: Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
In reply to this post by Patrick O'Callaghan-2
On Thu, 2009-11-05 at 11:47 -0430, Patrick O'Callaghan wrote:
> Use "netstat --protocol inet" to see what ports at your end are being
> used for this. Copy the "Local Address" field into "lsof -i
> @<address>" to see what process is doing it.

You might be able to find out all you need with the netstat command, by
itself, simply by adding some more parameters.

e.g. netstat -etuvp

(extended results for tcp & udp traffic, more verbose, & show the
processes involved)

Chances are that the original poster is using the Firefox web browser,
and has the anti-scamming feature enabled that queries Google about the
pages that they're looking up.

--
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
stan-7

Re: Google calling home from my system, what is the package?

Reply Threaded More More options
Print post
Permalink
On Fri, 06 Nov 2009 03:31:39 +1030
Tim <[hidden email]> wrote:
 
> You might be able to find out all you need with the netstat command,
> by itself, simply by adding some more parameters.
>
> e.g. netstat -etuvp

Thanks, will keep this as a possibility also.

>
> (extended results for tcp & udp traffic, more verbose, & show the
> processes involved)
>
> Chances are that the original poster is using the Firefox web browser,
> and has the anti-scamming feature enabled that queries Google about
> the pages that they're looking up.
>

Yes, I'm using the FF web browser, not sure about the anti-scamming
feature.  This happens when I am not actively browsing though the
browser is open.  Sometimes I'm in the consoles, other times in mail or
another Gnome program, and sometimes just sitting here thinking. It can
be long enough that the screensave and powersave has kicked in.

I've removed the google packages, I'll keep an eye open for this.

--
fedora-list mailing list
[hidden email]
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines