https://community.hpe.com/t5/operating-system-hp-ux/lsof/m-p/3482149#M213516 lsof -i :20 -i :21 -r 5<BR /><BR />loop on port 20 &amp; 21 every 5 seconds<BR /><BR /><BR />also, what does <BR /><BR />what /usr/lbin/ftpd<BR /><BR />return?? The -l should be working. What does your /etc/syslog.conf file look like?<BR /><BR />mine is:<BR /><BR />#<BR />#<BR />mail.debug /var/adm/syslog/mail.log<BR />*.info;mail.none /var/adm/syslog/syslog.log<BR />*.alert /dev/console<BR />*.alert root<BR />*.emerg *<BR /><BR /><BR />#<BR />live free or die<BR />harry d brown jr Wed, 09 Feb 2005 11:47:03 GMT harry d brown jr 2005-02-09T11:47:03Z https://community.hpe.com/t5/operating-system-hp-ux/lsof/m-p/3482148#M213515 I am trying to track down a ftp process hitting my box every 5 minutes. Can someone inform this dead brain of mine on how I would do that using lsof. I need to track an ip of where it is comming from.<BR /><BR />I have ftpd -l in /etc/inetd.conf but its not reporting the ipaddress info.<BR /><BR />I restarted inetd Wed, 09 Feb 2005 11:36:52 GMT https://community.hpe.com/t5/operating-system-hp-ux/lsof/m-p/3482148#M213515 Nobody's Hero 2005-02-09T11:36:52Z https://community.hpe.com/t5/operating-system-hp-ux/lsof/m-p/3482149#M213516 lsof -i :20 -i :21 -r 5<BR /><BR />loop on port 20 &amp; 21 every 5 seconds<BR /><BR /><BR />also, what does <BR /><BR />what /usr/lbin/ftpd<BR /><BR />return?? The -l should be working. What does your /etc/syslog.conf file look like?<BR /><BR />mine is:<BR /><BR />#<BR />#<BR />mail.debug /var/adm/syslog/mail.log<BR />*.info;mail.none /var/adm/syslog/syslog.log<BR />*.alert /dev/console<BR />*.alert root<BR />*.emerg *<BR /><BR /><BR />#<BR />live free or die<BR />harry d brown jr Wed, 09 Feb 2005 11:47:03 GMT https://community.hpe.com/t5/operating-system-hp-ux/lsof/m-p/3482149#M213516 harry d brown jr 2005-02-09T11:47:03Z