Michael D. Berger wrote: > On Fri, 01 Apr 2011 11:32:16 -0400, m.roth-x6lchVBUigD1P9xLtpHBDw wrote: > >> Michael D. Berger wrote: > [...] >> <snip> >> Not great on this, but *if* I understand it, it's saying that the IP >> address of your server is 192.168.9.20, and it's talking to itself, at >> destination port 80 - apache, that would be. >> >> mark > > Yes, that is true, but the question is "who is doing the talking?". > Another block of them just ended. It lasted just under an hour. you might be able to see the process with netstat when it's happening.