[ale] Netstat Question

Bob Toxen transam at verysecurelinux.com
Wed Jun 29 18:29:18 EDT 2005


On Wed, Jun 29, 2005 at 01:55:40PM -0400, Ian Philpot wrote:
> Dow Hurst wrote:
> > Issue at the prompt:
> > fuser 717/tcp
> > 
> > match the process PID you get from fuser with your output from ps:
> > 
> > ps aux | grep "PID"
> > 
> > You should get a match that will help you identify what process has the 
> > port.  Repeat for the other port.
> > Dow

> Another option that I've learned about recently is to use the -p flag 
> with netstat. That'll also list the pid of the program that owns the 
> port. I don't know how long that option has been around, but I've 
> usually had to use other programs like lsof to do the job.
I LOVE netstat's -p option.  It's been around for about 4 years and
requires one to be root to use effectively.

> Hope this helps.

> -- 
> Jason Fritcher
> jkf at wolfnet.org

> Sorry for the delay, but thank you for your response. I will try both later 
> this eve.

> -- 
> /ip | http://www.faqs.org/rfcs/rfc1739.html

Bob Toxen
bob at verysecurelinux.com               [Please use for email to me]
http://www.verysecurelinux.com        [Network&Linux/Unix security consulting]
http://www.realworldlinuxsecurity.com [My book:"Real World Linux Security 2/e"]
Quality Linux & UNIX security and SysAdmin & software consulting since 1990.

"Microsoft: Unsafe at any clock speed!"
   -- Bob Toxen 10/03/2002



More information about the Ale mailing list