Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Dec 2010 15:40:00 +0100
From:      Matthias Apitz <guru@unixarea.de>
To:        S Mathias <smathias1972@yahoo.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: what process is sending this packet?
Message-ID:  <20101227144000.GA46133@current.Sisis.de>
In-Reply-To: <586011.29943.qm@web121407.mail.ne1.yahoo.com>
References:  <586011.29943.qm@web121407.mail.ne1.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
El día Monday, December 27, 2010 a las 06:30:05AM -0800, S Mathias escribió:

> I can see, that theres a program that keeps sending packets on port 25:
> 
> Dec 27 14:11:46 a kernel: [ 6336.992320] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61533 DF PROTO=TCP SPT=37263 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> Dec 27 14:12:01 a kernel: [ 6352.635704] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55853 DF PROTO=TCP SPT=40644 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> Dec 27 14:12:04 a kernel: [ 6355.641085] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55854 DF PROTO=TCP SPT=40644 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> Dec 27 14:12:10 a kernel: [ 6361.649059] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55855 DF PROTO=TCP SPT=40644 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> 
> but where or how could i find out, that what process sends these packets?

looks like local delivery (127.0.0.1) of mail (port 25); you might catch
the proc with lsof (from ports collection);

HIH

	matthias
-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e <guru@unixarea.de> - w http://www.unixarea.de/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20101227144000.GA46133>