unknown processes, various ports, various IPs

[secretmango]

I have a ton of processes that are displayed as "unknown" and connect through different ports, to different IPs.

Unknown process is connecting to 89.64.2.209 on TCP port 13610
Unknown process is connecting to 149.62.205.41 on TCP port 7347

Using OpenSnitch in eBPF mode, the kernel module is installed, on NixOS.

It works well apart from this. I suspect Flatpak applications? Every normal process works fine, temporary processes like whois through a nix-shell, everything else.

I also noted these processes spawning when using Firefox, and sites loaded really slowly. This is odd as I allow Internet for Firefox. This might be DNS (systemd-resolved I suppose)? The sites loaded fully but really really slowly.

linuxKernel.packages.linux_6_12.opensnitch-ebpf (1.7.0.0-6.12.35)
opensnitch (1.7.0.0)
opensnitch-ui (1.7.0.0)

Kernel 6.12.35 longterm

[gustavo-iniguez-goya]

Unknown process is connecting to 89.64.2.209 on TCP port 13610

hmm, unless you're using a bittorrent client, tor or a similar app, I think those connections could be responses rather than new outbound connections.

Set LogLevel to -1 in /etc/opensnitchd/default-config.json to see what kind of connections are. It'll print the details of the network packets.
(note: set it back to >= 0, otherwise the GUI will complain).