Comodo FW, blocking a tracking site IP range. netstat says "syn_sent".

I guess that means that Comodo blocked the App?

The state SYN_SENT means that an application has made arequest for a TCP session, but has not yet received the return SYN+ACK packet.
and is there any way to trace down what app made this request for this TCP connection? I see in the comodo activity monitor log, an “outbound policy violation” logged to this IP, but I don’t see where the app that made this request is logged.

Hi jrx10.

Would you mind posting the details from you logs. It will give us a better idea of what’s happening.