i'd like a pointer to where i could
1) find out how to read the network utility reports
2) understand what socket connections should be open
right now i can't really understand the Network utility report. For example i've got two open sockets to google. why? i had google earth open and closing that eliminated one of the sockets but it got replaced by another socket to google with a different IP.
anyway a link to a tutorial on how to understand the Network Utility reports would be nice. thanks!
Do you have a gmail notifier installed, or do you use gmail? Also, it's possible that google earth is keeping a connection to get downloads or something. This program will give much more detailed reports, and allow you to deny access to the web to some programs:
http://www.obdev.at/products/littlesnitch/index.html