Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
: debian-security@lists.debian.org Cc: Nico Angenon ; lesley.bi...@gmail.com Subject: Re: finding a process that bind a spcific port can you paste a ps auxf output ? maybe someone see some strange process -- Matias On Wednesday, January 22, 2014 10:57:14 AM Nico Angenon wrote: Hello, i’ve put a

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
Hello, i’ve put a firewall rules on this before the box, so, there is no connexion left on this port... but there was a lot of trafic on this port before the rule... Nico From: Lesley Binks Sent: Wednesday, January 22, 2014 2:46 PM To: Nico Angenon Cc: debian-security@lists.debian.org

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
no output Thanks for all... Nico -Message d'origine- From: johan A. van Zanten Sent: Wednesday, January 22, 2014 1:56 PM To: n...@creaweb.fr Cc: debian-security@lists.debian.org Subject: Re: finding a process that bind a spcific port "Nico Angenon" wrote: nop

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
File /tmp/a and tmp/b gives me the same numberlist... I'll fromat the box, it'll go faster... Nico -Message d'origine- From: Matias Mucciolo Sent: Wednesday, January 22, 2014 2:14 PM To: debian-security@lists.debian.org Cc: Nico Angenon Subject: Re: finding a proc

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
if it installed, i didn’t do it... i’ve never heard about this... Nico From: Kevin Olbrich Sent: Wednesday, January 22, 2014 2:04 PM To: Nico Angenon Cc: debian security Subject: Re: finding a process that bind a spcific port Do you have IntelliJ installed in this box? http

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
Same : No output... Nico -Message d'origine- From: johan A. van Zanten Sent: Wednesday, January 22, 2014 1:56 PM To: n...@creaweb.fr Cc: debian-security@lists.debian.org Subject: Re: finding a process that bind a spcific port "Nico Angenon" wrote: nope...

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
i do try as root... Nico From: Frank Sent: Wednesday, January 22, 2014 1:45 PM To: debian-security@lists.debian.org Subject: Re: finding a process that bind a spcific port On 01/22/2014 01:20 PM, Nico Angenon wrote: Hello, i think i’ve been hacked on one of my boxes... I try to find

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
nope... never used this service... Still looking for an explanation, try chrootkit and rkhunter right now Nico From: wootanaz Sent: Wednesday, January 22, 2014 1:45 PM To: Nico Angenon Cc: debian security Subject: Re: finding a process that bind a spcific port Maybe you are using (or had

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
an 22, 2014 at 7:20 PM, Nico Angenon wrote: > Hello, > > i think i’ve been hacked on one of my boxes... > > I try to find with process bind a specific port : > > # netstat -anpe |grep udp > gives me > udp0 0 0.0.0.0:10001 0.0.0.0:* > 0

Re: finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
the same...no output Nico -Message d'origine- From: Andika Triwidada Sent: Wednesday, January 22, 2014 1:33 PM To: Nico Angenon Cc: debian security Subject: Re: finding a process that bind a spcific port On Wed, Jan 22, 2014 at 7:20 PM, Nico Angenon wrote: Hello, i think

finding a process that bind a spcific port

2014-01-22 Thread Nico Angenon
Hello, i think i’ve been hacked on one of my boxes... I try to find with process bind a specific port : # netstat -anpe |grep udp gives me udp0 0 0.0.0.0:10001 0.0.0.0:* 0 5950269 - but # lsof |grep 10001 doesn’t show me anything