can you paste a ps auxf output ?
maybe someone see some strange process

-- 

Matias

On Wednesday, January 22, 2014 10:57:14 AM Nico Angenon wrote:
> Hello,
> 
> i’ve put a firewall rules on this before the box, so, there is no connexion 
> left on this port... but there was a lot of trafic on this port before the 
> rule...
> 
> Nico
> 
> From: Lesley Binks 
> Sent: Wednesday, January 22, 2014 2:46 PM
> To: Nico Angenon 
> Cc: [email protected] 
> Subject: Re: finding a process that bind a spcific port
> 
> Sorry for top posting. I'm on my phone.
> 
> You can always check for data on the interface using tcpdump.
> Worth using it to verify what's happening.
> 
> Lesley 
> 
> On 22 Jan 2014 13:33, "Nico Angenon" <[email protected]> wrote:
> 
>   no output....
> 
>   Thanks for all...
> 
>   Nico
> 
>   -----Message d'origine----- From: johan A. van Zanten
>   Sent: Wednesday, January 22, 2014 1:56 PM
>   To: [email protected]
>   Cc: [email protected]
>   Subject: Re: finding a process that bind a spcific port
> 
> 
>   "Nico Angenon" <[email protected]> wrote:
> 
>     nope... never used this service...
>     Still looking for an explanation, try chrootkit and rkhunter right
>     now....
> 
> 
>   Try fuser:
> 
>   fuser -n udp 10001
> 
>   -johan
> 
> 
>   -- 
>   To UNSUBSCRIBE, email to [email protected]
>   with a subject of "unsubscribe". Trouble? Contact 
> [email protected]
>   Archive: 
> http://lists.debian.org/[email protected]
>  
> 
>   -- 
>   To UNSUBSCRIBE, email to [email protected]
>   with a subject of "unsubscribe". Trouble? Contact 
> [email protected]
>   Archive: http://lists.debian.org/4DBF73DFC57C4F76AF3902A5199BB05C@NicoPC
> 
> 


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]

Reply via email to