1
vote
2answers
95 views

Can I find the list of ports being listened by a process ordered by the time of opening?

I know I can see the list of open ports using the lsof command. I am trying to view the results ordered by timestamp of listening. The process opens multiple (~6) ports and I suspect the order of ...
1
vote
2answers
71 views

How to map an ephemeral port to a pid?

I have a RHEL server with several apps on it and I am attempting to figure out which one of them is making calls to an external web service. I have TCP dumps that show the calls being made and through ...
3
votes
2answers
2k views

How to determine which TCP/UDP ports are being opened by a given process (linux)?

I know how to do the opposite (find out what process has a given port open) using lsof or netstat, but extensive research on Google hasn't helped me solve the reverse problem. I know I could use ...
1
vote
2answers
341 views

Unknown process on port, lsof no help, nfs-kernel-server?

During a standard security sweep we found out a something was listening on a port unknown to us, 2030, and we are having trouble determining the source. # netstat -anp | grep LIST tcp 0 0 ...
1
vote
4answers
147 views

How to find the program responsible for a specific TCP socket (linux)

joe@server:~$ sudo lsof -i :36168 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME java 23059 activemq 15u IPv6 109382 0t0 TCP *:36168 (LISTEN) From the output above I want ...