(on Mon, 2020-11-30 at 18:37 +0000, Tim wrote)
...you really want to do something like "netstat -atuevp" to see
what, where,
and who is involved in network traffic.
(on Mon, 2020-11-30 at 21:03 +0000, Ed Greshko wrote)
Along with watching the output of wireshark, you should run "netstat
-atuevp"
and see what connections are "established".
I tried that as root after seeing Tim's suggestion. I saw nothing useful in the output, so I did not post it. My apologies for that. I've re-ran it now as root. The output is attached.
I've installed wireshark. The man page is thousands of lines long. Is there a good beginner-level tutorial for that?!