[Gllug] Which process has a port open?

gllug at codex.net gllug at codex.net
Thu Sep 20 23:01:19 UTC 2001


On Wed, 19 Sep 2001 tet at accucard.com wrote:

> 
> One of our Solaris boxen has something listening on some odd ports
> (41388 and 41389). Does anyone know how I can find out which process
> is responsible? There's nothing obvious showing up in the process
> table (and yes, I've verified that the box hasn't been rooted and had
> a modified ps installed to hide the offending process). Under Linux,
> I'd telnet to the port, and then do a netstat -p, but netstat under
> Solaris isn't that helpful...

assuming solaris 8 for sun4
# wget ftp://ftp.sunfreeware.com/pub/freeware/sparc/8/lsof-4.49-sol8-sparc-64-local.gz
# gzip -d lsof-4.49-sol8-sparc-64-local.gz
# pkgadd -d lsof-4.49-sol8-sparc-64-local
# /usr/local/bin/lsof -i :41388
# /usr/local/bin/lsof -i :41389



-- 


PGP key:  http://codex.net/pgp/pgp.asc


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list