Date: Sun, 30 Apr 2006 13:58:48 -0700 From: Glenn Dawson <glenn@antimatter.net> To: boink <lordboink@gmail.com>, freebsd-questions@freebsd.org Subject: Re: Hacked? How can I tell what process is sending packets from a particular port (udp/55613)? Message-ID: <7.0.1.0.2.20060430135653.070baab0@antimatter.net> In-Reply-To: <73cb07950604301352w15a543d7sb3828504ca416da8@mail.gmail.co m> References: <73cb07950604301352w15a543d7sb3828504ca416da8@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 01:52 PM 4/30/2006, boink wrote: >Dear FreeBSD, > >I see outbound packets from udp/55613, one every 5 seconds, to a >single non-routable (10....) IP, with destination port increasing by 1 >with each packet, with expected ICMP Destination net unreachables from >an upstream router. > >AFAIK, there's no reason for this and I don't like it - how can I tell >which process is sending the packets? sockstat -c should give you the info you need. -Glenn >With thanks in advance, >boink >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7.0.1.0.2.20060430135653.070baab0>