Novell Linux server used for Novell Access Gateway. When I run netstat -a I get thousands of CLOSE_WAIT state connections from localhost:xxxx to localhost:snpp.
1st question how can I trace the connection to its source. Source being the executable causing it.
2nd question is that normal for this kind of server? I'm reading about SNPP online and all I see is it's a pager related protocol. I'm not doing anything pager related on this server.