Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 30 Apr 2006 22:52:06 +0200
From:      boink <lordboink@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Hacked? How can I tell what process is sending packets from a particular port (udp/55613)?
Message-ID:  <73cb07950604301352w15a543d7sb3828504ca416da8@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Dear FreeBSD,

I see outbound packets from udp/55613, one every 5 seconds, to a
single non-routable (10....) IP, with destination port increasing by 1
with each packet, with expected ICMP Destination net unreachables from
an upstream router.

AFAIK, there's no reason for this and I don't like it - how can I tell
which process is sending the packets?

With thanks in advance,
boink



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?73cb07950604301352w15a543d7sb3828504ca416da8>