[GRLUG] Rogue SSH connections

Robert Citek robert.citek at gmail.com
Sun Oct 6 19:34:42 EDT 2013


On Sunday, October 6, 2013, L. V. Lammert wrote:

> On Sun, 6 Oct 2013, megadave wrote:
>
> > lsof is available for linux. You might need to install it from your
> > package manager.
> >
> Sorry, I was referring to fstat being the eqivalent of lsof, but providing
> more informtion. lsof is on the Linux box, just cannot see similar data.
>
>         Lee


Try:

lsof -p {pid of ssh connection}

That will return a list of open everything (files, pipes, sockets, tcp
connections, etc.) for that pid.

Regards,
- Robert
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shinobu.grlug.org/pipermail/grlug/attachments/20131006/0f4db726/attachment.html>


More information about the grlug mailing list