File /tmp/a and tmp/b gives me the same numberlist...

I'll fromat the box, it'll go faster...

Nico

-----Message d'origine----- From: Matias Mucciolo
Sent: Wednesday, January 22, 2014 2:14 PM
To: [email protected]
Cc: Nico Angenon
Subject: Re: finding a process that bind a spcific port


You can try something like:

cd /proc/ && ls -d1 [0-9]* | sort -n > /tmp/a && ps ax -o pid | grep "[0-9]" | tr -d " " | sort -n > /tmp/b

and check with ip exits in /proc dir but not in ps
example in my box:

......
4615                                                            4615
4624                                                            4624
4647                                                            4647
4702                                                          | 4704
4703                                                          | 4705
                                                             > 4706
                                                             > 4707

in my case i have difference but is because the grep/etc  pid



--

Matias


On Wednesday, January 22, 2014 10:01:09 AM Nico Angenon wrote:
Same : No output...

Nico

-----Message d'origine----- From: johan A. van Zanten
Sent: Wednesday, January 22, 2014 1:56 PM
To: [email protected]
Cc: [email protected]
Subject: Re: finding a process that bind a spcific port


"Nico Angenon" <[email protected]> wrote:
> nope... never used this service...
> Still looking for an explanation, try chrootkit and rkhunter right
> now....

Try fuser:

fuser -n udp 10001

-johan


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/7FDB49F9BD694384B75B034AE72A5825@NicoPC




--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/2982F3BBF0F24EE283ACDB8DF366C387@NicoPC

Reply via email to