Hacked? How can I tell what process is sending packets
from a particular port (udp/55613)?
glenn at antimatter.net
Sun Apr 30 20:59:40 UTC 2006
At 01:52 PM 4/30/2006, boink wrote:
>I see outbound packets from udp/55613, one every 5 seconds, to a
>single non-routable (10....) IP, with destination port increasing by 1
>with each packet, with expected ICMP Destination net unreachables from
>an upstream router.
>AFAIK, there's no reason for this and I don't like it - how can I tell
>which process is sending the packets?
sockstat -c should give you the info you need.
>With thanks in advance,
>freebsd-questions at freebsd.org mailing list
>To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions