Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Novell Linux server used for Novell Access Gateway. When I run netstat -a I get thousands of CLOSE_WAIT state connections from localhost:xxxx to localhost:snpp.

1st question how can I trace the connection to its source. Source being the executable causing it.

2nd question is that normal for this kind of server? I'm reading about SNPP online and all I see is it's a pager related protocol. I'm not doing anything pager related on this server.

Thanks

share|improve this question

1 Answer 1

up vote 0 down vote accepted

You almost had it with netstat, try netstat -ape

  • -a for all listening & non-listening sockets
  • -p to show the PID (and name) of the application that created the sockets
  • -e show extra information (can't hurt)

SNPP could be a false alarm, with out -n netstat will automatically lookup the port number (SNPP is port 444) and return the name, as defined in /etc/services

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.