RE: How to find a process

["Francisco Rodrigo Cortinas Maseda" <francisco.cortinas () jazztel com>]

Thanks to all in the list; there were a lot of responses to this
question.

Regards.

-----Mensaje original-----
De: Anestis Demopoulos [mailto:anesde () gmail com] 
Enviado el: jueves 14 de junio de 2007 9:35
Para: Francisco Rodrigo Cortinas Maseda
CC: security-basics () securityfocus com
Asunto: Re: How to find a process


Try netstat/? for more info.
There is option "-b" that displays the relevant executable and "-o" that
shows the owning process ID.

Regards,
Anestis

On 6/13/07, Francisco Rodrigo Cortinas Maseda
<francisco.cortinas () jazztel com> wrote:
> Hello,
>
> my name is Fran, im a network and system administrator, and i have a 
> strange case, but sure somenone have had the same problem before me.
>
> My problem is that we have some strange traffic on the firewalls, 
> going from a server on a DMZ to public client pools.
>
> 10:09:10.511978 00:0e:0c:71:7f:cd > 10:00:00:00:26:01, ethertype IPv4 
> (0x0800), length 61: IP XXXXX.44267 > XXXXXX.3072: UDP, length 19
>
> The problem is: with netstat i only see the ports daemons are 
> listening on. I want to know the process that is using the outgoing 
> port, that is, 44267.
>
> Is there a way to know this?
>
> Thanks in advance.
> Regards.