TCP port numbers

[KapilRaj]

Hi folks,

I hv recently noticed lots of traffic through a specific TCP port number in my intranet. I hv a network of HP Business servers running production billing running HPUX 11.0.

Is there any unix command , which will map my tcp port number to the corresponding application ?.

Please help me out champs.

Thanks in advance

Kapil Raj

[Steven Sim Kok Leong]

Hi,

Use lsof with the -i option, downloadable at:

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/lsof-4.61/

# lsof -i

Hope this helps. Regards.

Steven Sim Kok Leong

[Steven Sim Kok Leong]

Hi,

To add on, if you want to monitor all the application processes through a specific TCP port number eg. TCP port 1521 (typical Oracle port):

# lsof -i tcp:1521

This will show the processes along with originating IP address and source port along with other information.

Hope this helps. Regards.

Steven Sim Kok Leong

[Bill Thorsteinson]

Grep the port in /etc/services.

Check the list at:
http://www.iana.org/assignments/port-numbers

If it is a number like 12345 or 23456 check the trojans
list at:
http://www.sys-security.com/html/papers/trojan_list.html

or check it anyway.

[Uli Manschke]

well, maybe

netstat -a
(or -an)

helps as well?
Regards
uli

[MANOJ SRIVASTAVA]

Hi Kapil


lsof from :

ftp://vic.cc.purdue.edu/pub/tools/unix/lsof

will do the job for you , this site has a complied version for 64 bit HPUX also.


Manoj Srivastava