finding a process that bind a spcific port

["Nico Angenon" <nico@creaweb.fr>]

Hello,

 

i think i’ve been hacked on one of my boxes...

 

I try to find with process bind a specific port :

 

# netstat -anpe |grep udp

gives me

udp        0      0 0.0.0.0:10001           0.0.0.0:*                           0          5950269     -

 

 

but

# lsof |grep 10001

doesn’t show me anything

 

i’ve  tried  to cat /proc/*/cmdline... no 10001 found

no 10001 in ‘ps aux’

no 10001 in ‘rpcinfo –p’

 

any idea ?

 

Thanks

Nico