Netstat

What connections are open and who has them open. Combine ps, netstat and lsof and you can really see what is happening on your box.

netstat -lvanp

This gives you pretty much everything you need for tracking down those connections. combined with grep and grep -v to get rid of items you don't want