Re: what process is sending this packet?

[Matthias Apitz]

El día Monday, December 27, 2010 a las 06:30:05AM -0800, S Mathias escribió:

> I can see, that theres a program that keeps sending packets on port 25:
> 
> Dec 27 14:11:46 a kernel: [ 6336.992320] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 
> DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61533 DF PROTO=TCP 
> SPT=37263 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> Dec 27 14:12:01 a kernel: [ 6352.635704] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 
> DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55853 DF PROTO=TCP 
> SPT=40644 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> Dec 27 14:12:04 a kernel: [ 6355.641085] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 
> DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55854 DF PROTO=TCP 
> SPT=40644 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> Dec 27 14:12:10 a kernel: [ 6361.649059] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 
> DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55855 DF PROTO=TCP 
> SPT=40644 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0 
> 
> but where or how could i find out, that what process sends these packets?

looks like local delivery (127.0.0.1) of mail (port 25); you might catch
the proc with lsof (from ports collection);

HIH

        matthias
-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e <g...@unixarea.de> - w http://www.unixarea.de/
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"