[H-GEN] identifying process owner of an active port?

Michael Anthon michael at anthon.net
Fri Aug 9 15:23:45 EDT 2002


[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

Try lsof or fuser.  I know for sure that lsof does it, not so sure about
fuser (and I've also had issues with fuser totally locking up).  From
memory, the command for lsof would be something like..

lsof -i :1008

Cheers
Michael

----- Original Message -----
From: "Matthew Taylor" <bmatthewtaylor at yahoo.co.uk>
To: <general at lists.humbug.org.au>
Sent: Saturday, August 10, 2002 12:30 AM
Subject: [H-GEN] identifying process owner of an active port?


> I recently noticed the attached output from nmap'ing localhost.
>
> the activity on ports 1008, 32770 & 32773 is new to me, pretty sure I
> didn't see it there a week or so ago.
>
> How do I go about tracing down what process is opening this port? I have
> to confess I dont really understand the 'portmap' or 'sunrpc' type
> activity, suggestions on where I should be looking? I think ufsd is a
> sunrpc 'thing', ideas?
>
> Mat.
>


----------------------------------------------------------------------------
----


>
> Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
> Interesting ports on localhost.localdomain (127.0.0.1):
> (The 1537 ports scanned but not shown below are in state: closed)
> Port       State       Service
> 111/tcp    open        sunrpc
> 1008/tcp   open        ufsd
> 6000/tcp   open        X11
> 32770/tcp  open        sometimes-rpc3
> 32773/tcp  open        sometimes-rpc9
>
>
> Nmap run completed -- 1 IP address (1 host up) scanned in 1 second
>


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/



More information about the General mailing list