Security Basics mailing list archives

Re: how to trace what is accessing the nic ?

From: Andreas Putzo <andreas () inferno nadir org>
Date: Fri, 22 Apr 2005 20:28:52 +0200

Hi,

On Friday 22 April 2005 15:45, Bonmariage, Serge wrote:

We've recently discovered that it is sending some strange TCP packets to
always the same private address.

The question is quite basic but is there a way to trace which process is
trying to send these packets?


Try 'netstat -cnp |grep SYN_SENT'
man 8 netstat

regards,
Andreas