netstat -tulpn | grep :10001 grep 10001 /etc/services or: fuser 10001/udp This will output PID Then find out process name associated with PID
ls -l /proc/PID/exe ---Permission to forward and reprint is given.--- *Don't confuse my personality with my attitude. My personality is who I am. My attitude depends on who you are.* On Wed, Jan 22, 2014 at 12:37 PM, Nico Angenon <n...@creaweb.fr> wrote: > the same...no output.... > > Nico > > -----Message d'origine----- From: Andika Triwidada > Sent: Wednesday, January 22, 2014 1:33 PM > To: Nico Angenon > Cc: debian security > Subject: Re: finding a process that bind a spcific port > > > On Wed, Jan 22, 2014 at 7:20 PM, Nico Angenon <n...@creaweb.fr> wrote: > >> Hello, >> >> i think i’ve been hacked on one of my boxes... >> >> I try to find with process bind a specific port : >> >> # netstat -anpe |grep udp >> gives me >> udp 0 0 0.0.0.0:10001 0.0.0.0:* >> 0 5950269 - >> >> >> but >> # lsof |grep 10001 >> doesn’t show me anything >> > > lsof -i -n | grep 10001 > > -- > To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact > listmas...@lists.debian.org > Archive: http://lists.debian.org/B0AA26B538DD4C15884CB658AD15788D@NicoPC > >
