Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.7\))
Subject: Re: pg_stat_activity's client_addr column contains "::1" but actually
 comes from elsewhere?
From: "Edward J. Sabol" <edwardjsabol@gmail.com>
In-Reply-To: <858450.1605563351@sss.pgh.pa.us>
Date: Mon, 16 Nov 2020 17:06:20 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <FCA6E7BE-44C8-4182-9FAB-D856170492A7@gmail.com>
References: <371E399B-8751-4A50-890D-02F899581EB6@gmail.com>
 <858450.1605563351@sss.pgh.pa.us>
To: pgsql-admin@postgresql.org
Precedence: bulk

On Nov 16, 2020, at 4:49 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> "Edward J. Sabol" <edwardjsabol@gmail.com> writes:
>> Hello! I'm trying to track down where some connections are coming =
from. "select pid,client_addr,client_hostname from pg_stat_activity" =
shows multiple entries with values with client_addr =3D "::1". =
"client_hostname" is blank for all entries, by the way, and unhelpful in =
this scenario. Also, "state" is "idle" for these entries I'm interested =
in, in case that matters.
>> ::1 would imply the IPv6 loopback address, so that means the =
connection is coming from a process on the server, right? But I'm =
positive there is no process on this server that is connecting to =
PostgreSQL (other than my psql session).
>=20
>> So where are they actually coming from and why is PostgreSQL =
seemingly misreporting them as coming from ::1?
>=20
> Well, unless the kernel is lying to us, that is where the connection
> came from.  Perhaps snooping around with netstat and lsof (if you have
> it) would be helpful.

Thanks for the reply. We figured out. One of our developers was using an =
ssh tunnel and connecting over that.

Regards,
Ed