I noticed the following connections, which fstat said were from xulrunner. tcp6 0 0 fnord.65284 gatey.sixxs.net.http ESTABLISHED tcp6 0 0 fnord.65287 tunnelserver.con.https ESTABLISHED I do have a tunnel and a /48 from sixxs, but not terminated on fnord. I have several firefox extensions, including flagfox. Any clues that this is about?
Description: PGP signature