[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: finding a process that bind a spcific port



netstat -tulpn | grep :10001
grep 10001 /etc/services

or:
fuser 10001/udp
This will output PID
Then find out process name associated with PID

ls -l /proc/PID/exe

---Permission to forward and reprint is given.---
Don't confuse my personality with my attitude. My personality is who I am. My attitude depends on who you are.


On Wed, Jan 22, 2014 at 12:37 PM, Nico Angenon <nico@creaweb.fr> wrote:
the same...no output....

Nico

-----Message d'origine----- From: Andika Triwidada
Sent: Wednesday, January 22, 2014 1:33 PM
To: Nico Angenon
Cc: debian security
Subject: Re: finding a process that bind a spcific port


On Wed, Jan 22, 2014 at 7:20 PM, Nico Angenon <nico@creaweb.fr> wrote:
Hello,

i think i’ve been hacked on one of my boxes...

I try to find with process bind a specific port :

# netstat -anpe |grep udp
gives me
udp        0      0 0.0.0.0:10001           0.0.0.0:*
0          5950269     -


but
# lsof |grep 10001
doesn’t show me anything

lsof -i -n | grep 10001

--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: [🔎] B0AA26B538DD4C15884CB658AD15788D@NicoPC" target="_blank">http://lists.debian.org/B0AA26B538DD4C15884CB658AD15788D@NicoPC



Reply to: