Security Basics mailing list archives

Re: How to find a process


From: Shane Warner <shane () aplv com>
Date: Wed, 13 Jun 2007 16:41:13 -0700

If it's a linux box try netstat -anp
--
Shane Warner
Director of IT
Answer Plus Inc
Las Vegas, NV 89121
http://www.aplv.com
702-388-7377
shane () aplv com


Quoting Francisco Rodrigo Cortinas Maseda <francisco.cortinas () jazztel com>:

Hello,

my name is Fran, im a network and system administrator, and i have a
strange case, but sure somenone have had the same problem before me.

My problem is that we have some strange traffic on the firewalls, going
from a server on a DMZ to public client pools.

10:09:10.511978 00:0e:0c:71:7f:cd > 10:00:00:00:26:01, ethertype IPv4
(0x0800), length 61: IP XXXXX.44267 > XXXXXX.3072: UDP, length 19

The problem is: with netstat i only see the ports daemons are listening
on. I want to know the process that is using the outgoing port, that is,
44267.

Is there a way to know this?

Thanks in advance.
Regards.

!DSPAM:46707ffd112841553211795!





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


Current thread: