Security Basics mailing list archives

Re: How to find a process


From: Roman Shirokov <insecure () yandex ru>
Date: Thu, 14 Jun 2007 15:17:16 +0100

Hi,

If I understand you right..

Under windows:

nestat -abn

Under Linux:

lsof -i

Hello,

my name is Fran, im a network and system administrator, and i have a
strange case, but sure somenone have had the same problem before me.

My problem is that we have some strange traffic on the firewalls, going
from a server on a DMZ to public client pools.

10:09:10.511978 00:0e:0c:71:7f:cd > 10:00:00:00:26:01, ethertype IPv4
(0x0800), length 61: IP XXXXX.44267 > XXXXXX.3072: UDP, length 19

The problem is: with netstat i only see the ports daemons are listening
on. I want to know the process that is using the outgoing port, that is,
44267.

Is there a way to know this?

Thanks in advance.
Regards.

__________ NOD32 2328 (20070613) Information __________

This message was checked by NOD32 antivirus system.
http://www.eset.com




-- 
Best regards,

Roman Shirokov

e-mail:insecure () yandex ru

Aut inveniam viam aut faciam. (I will either find a way or make one)


Current thread: