Re: How to find a process

["Joshua M. Miller" <joshua () itsecureadmin com>]

You can use the -p flag to list the associated PID:

netstat -anp | grep <port>

Thanks,
--
Joshua M. Miller - RHCE,VCP


Francisco Rodrigo Cortinas Maseda wrote:
> Hello,
>
> my name is Fran, im a network and system administrator, and i have a
> strange case, but sure somenone have had the same problem before me.
>
> My problem is that we have some strange traffic on the firewalls, going
> from a server on a DMZ to public client pools.
>
> 10:09:10.511978 00:0e:0c:71:7f:cd > 10:00:00:00:26:01, ethertype IPv4
> (0x0800), length 61: IP XXXXX.44267 > XXXXXX.3072: UDP, length 19
>
> The problem is: with netstat i only see the ports daemons are listening
> on. I want to know the process that is using the outgoing port, that is,
> 44267.
>
> Is there a way to know this?
>
> Thanks in advance.
> Regards.