Message outgoing over port 80 but don't know why

[Dan Walker]

We are getting the following message on outgoing from port 80
TCP packet out of state First packet isn't SYN;
tcp_flag; PUSH-ACK going to numerous sites, have brought down http to make sure it wasn't coming from there.

[Patrick Wallek]

Do you have lsof installed? If so try:

# lsof -i tcp:80

Will show what process(es) have port 80 open.

[Dan Walker]

lsof is on the system but not functioning I don't know if it ever worked on it.

[A. Clay Stephenson]

Someone may have installed a 32-bit version of lsof rather than a 64-bit version. Normally, a 32-bit application will run just fine under a 64-bit OS but kernel intrusive applications like lsof are the exception. You may simply need to run it as root. You may be able to use netstat -an to find your process but lsof is a better choice.