lsof

[Nobody's Hero]

I am trying to track down a ftp process hitting my box every 5 minutes. Can someone inform this dead brain of mine on how I would do that using lsof. I need to track an ip of where it is comming from.

I have ftpd -l in /etc/inetd.conf but its not reporting the ipaddress info.

I restarted inetd

[harry d brown jr · Accepted solution]

lsof -i :20 -i :21 -r 5

loop on port 20 & 21 every 5 seconds


also, what does

what /usr/lbin/ftpd

return?? The -l should be working. What does your /etc/syslog.conf file look like?

mine is:

#
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *


#
live free or die
harry d brown jr