Hello,

i’ve put a firewall rules on this before the box, so, there is no connexion 
left on this port... but there was a lot of trafic on this port before the 
rule...

Nico

From: Lesley Binks 
Sent: Wednesday, January 22, 2014 2:46 PM
To: Nico Angenon 
Cc: debian-security@lists.debian.org 
Subject: Re: finding a process that bind a spcific port

Sorry for top posting. I'm on my phone.

You can always check for data on the interface using tcpdump.
Worth using it to verify what's happening.

Lesley 

On 22 Jan 2014 13:33, "Nico Angenon" <n...@creaweb.fr> wrote:

  no output....

  Thanks for all...

  Nico

  -----Message d'origine----- From: johan A. van Zanten
  Sent: Wednesday, January 22, 2014 1:56 PM
  To: n...@creaweb.fr
  Cc: debian-security@lists.debian.org
  Subject: Re: finding a process that bind a spcific port


  "Nico Angenon" <n...@creaweb.fr> wrote:

    nope... never used this service...
    Still looking for an explanation, try chrootkit and rkhunter right
    now....


  Try fuser:

  fuser -n udp 10001

  -johan


  -- 
  To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
  with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
  Archive: 
http://lists.debian.org/20140122.125650.367853660900983582.jo...@brandwatch.com 

  -- 
  To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
  with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
  Archive: http://lists.debian.org/4DBF73DFC57C4F76AF3902A5199BB05C@NicoPC

Reply via email to