John -

I would do:  lsof -i tcp:1500-1599
to get a mapping of what is using ports in that range, and then
'ps -flu <PID>' on suspicious bogies, to particularly see when they
started, as in possibly being leftover processes.

   Richard Sims

Reply via email to