for net gurus
2007-12-25 11:34:00
I am totally amazed at how fast I get answers from sun-managers.
Q.:
>I am trying to add security by turning off items in rpc and services. Also in
>using "netstat -i", one can get a line like:
>
>*.28503 *.* 0 0 0 0 LISTEN
>
>This is not a number associated with any service on the system. I would like
>to trace this "28503" back to a "pid". If this was not an acceptable socket,
>I could get rid of the pid that was using it. Does anyone know how to trace
>this number back to a pid ?
Solution:
note: I really used "netstat -a" - and this number is randomly generated.
from Rich Kulawiec
Get yourself a copy of "lsof", which is a wonderful little tool
made exactly for solving problems like this. Among other things,
it will show you which PID has that socket open -- but it does
a lot of other things as well. I'm enclosing the README from lsof
below, to give you an idea of its capabilities. [ There's a much
newer version than the one described below but I believe it's at
the same FTP location. ]
ftp://ftp.cert.com/pub/tools/lsof
from Reta Lichtensteiger
Use "lsof" You should be able to find it via AltaVista, or on
ftp.uu.net.
from Davide Migliavacca
Use lsof, you can get it in any decent software site, and the binaries =
for Solaris at http://smc.vnet.net/solaris_2.5_nof.html
Best
Davide
from Dan Simoes
Get a copy of lsof.
Thanks to all of you.
Comments
Got something to say?
You must be logged in to post a comment.
