[mn29]

Hi there,

These connections below have been ESTABLISHED for well over an hour now but running tcpdump doesn't show me any traffic.

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 196.ip-37-59-125.eu:22 218.87.111.116:53832 ESTABLISHED 1960/python
tcp 0 0 196.ip-37-59-125.eu:22 226.235.200.146.d:53208 ESTABLISHED 1960/python
tcp 0 0 196.ip-37-59-125.eu:22 241.147.199.146.d:40122 ESTABLISHED 1960/python

root@vps:~# tcpdump -i any port 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes

I believe I should be seeing some keep-alive packets for TCP connections that have been "ESTABLISHED" for well over an hour, although tcpdump is not showing me any!

So with that assumption, I assume my VPS is doing some funky networking that I hope you could help with? I've attached below the ifconfig so that you can see my interfaces available (IPs have been censored).

Many thanks for your help!

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:502 errors:0 dropped:0 overruns:0 frame:0
TX packets:502 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:55487 (55.4 KB) TX bytes:55487 (55.4 KB)

venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.2 P-t-P:127.0.0.2 Bcast:0.0.0.0 Mask:255.255.255.255
inet6 addr: ***/56 Scope:Global
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:291906 errors:0 dropped:0 overruns:0 frame:0
TX packets:365504 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:27900827 (27.9 MB) TX bytes:296808361 (296.8 MB)

venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:*** P-t-P:*** Bcast:*** Mask:255.255.224.0
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1