[GRLUG] Rogue SSH connections

megadave megadave at gmail.com
Sun Oct 6 19:36:13 EDT 2013


Or even

lsof -i -n | grep TCP | grep -v LISTEN

On Sun, Oct 6, 2013 at 7:35 PM, megadave <megadave at gmail.com> wrote:
> I am sure lsof will show you what you need..
>
> You've got some open TCP connections, and want to find which PID
> opened them, right?
>
> lsof will show that.
>
> try
>
> lsof -i -n | grep -v LISTEN
>
>
>
> On Sun, Oct 6, 2013 at 7:14 PM, L. V. Lammert <lvl at omnitec.net> wrote:
>> On Sun, 6 Oct 2013, megadave wrote:
>>
>>> lsof is available for linux. You might need to install it from your
>>> package manager.
>>>
>> Sorry, I was referring to fstat being the eqivalent of lsof, but providing
>> more informtion. lsof is on the Linux box, just cannot see similar data.
>>
>>         Lee
>> _______________________________________________
>> grlug mailing list
>> grlug at grlug.org
>> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug


More information about the grlug mailing list