Re: finding a process that bind a spcific port

[Matias Mucciolo <mmucciolo@suteba.org.ar>]

You can try something like:

cd /proc/ && ls -d1 [0-9]* | sort -n  > /tmp/a  && ps ax -o pid | grep  "[0-9]" | tr -d " " | sort -n > /tmp/b

and check with ip exits in /proc dir but not in ps
example in my box:

......
4615                                                            4615
4624                                                            4624
4647                                                            4647
4702                                                          | 4704
4703                                                          | 4705
                                                              > 4706
                                                              > 4707

in my case i have difference but is because the grep/etc  pid



-- 

Matias  


On Wednesday, January 22, 2014 10:01:09 AM Nico Angenon wrote:
> Same : No output...
> 
> Nico
> 
> -----Message d'origine----- 
> From: johan A. van Zanten 
> Sent: Wednesday, January 22, 2014 1:56 PM 
> To: nico@creaweb.fr 
> Cc: debian-security@lists.debian.org 
> Subject: Re: finding a process that bind a spcific port 
> 
> 
> "Nico Angenon" <nico@creaweb.fr> wrote:
> > nope... never used this service...
> > Still looking for an explanation, try chrootkit and rkhunter right
> > now....
> 
> Try fuser:
> 
> fuser -n udp 10001
> 
> -johan
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: [🔎] 7FDB49F9BD694384B75B034AE72A5825@NicoPC">http://lists.debian.org/[🔎] 7FDB49F9BD694384B75B034AE72A5825@NicoPC
> 
>