Re: Hacked? How can I tell what process is sending packets from a particular port (udp/55613)?



At 01:52 PM 4/30/2006, boink wrote:
Dear FreeBSD,

I see outbound packets from udp/55613, one every 5 seconds, to a
single non-routable (10....) IP, with destination port increasing by 1
with each packet, with expected ICMP Destination net unreachables from
an upstream router.

AFAIK, there's no reason for this and I don't like it - how can I tell
which process is sending the packets?

sockstat -c should give you the info you need.

-Glenn


With thanks in advance,
boink
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"



Relevant Pages