Determine what service listening on port 2007-07-14 - By Steve Phillips
Back Romeo Theriault wrote: > The -sV option on nmap would give you service version information. You > might > also want to try connecting to the ports with telnet to see what they might > show.
I find "lsof | grep <port>" tends to use (obviously without < and > ) but usually takes a little interpretation (i.e - look for UDP: <port>, not the other random things that will show up in such a generalised grep), lsof will show the process that has the port open, past that, you can trace back PIDs and PPID's to find the process parent - as is usually needed when dealing with java applications etc.
trying to use 'telnet' to connect to a UDP port however will be rather fruitless, as was the "LISTEN" suggestion (UDP services show as "Idle" not LISTENING)
good luck :-)
-- Steve.
> > On 7/13/07, joseph tacuyan <joseph.mailboxlist@(protected)> wrote: >> >> how about nmapping it? >> >> On 7/13/07, redhat@(protected) <redhat@(protected)> wrote: >> > >> > I have a RHEL ES3 server that has three listening udp ports open. I'm >> > having a hard time trying to determine what service opened them up. >> The >> > ports are udp 1020,1022,1023. I have tried to following: "netstat >> -lp", >> > the PID/Program name column just shows a -, "fuser -n udp 1020", >> > nothing returned, lsof -i :1020. nothing returned. I have shut down a >> > few services in an attempt to discover who opened the ports, but no >> > luck. Anything I may have forgotten? >> > >> > Thanks >> > >> > -- >> > redhat-list mailing list >> > unsubscribe mailto:redhat-list-request@(protected)?subject=unsubscribe >> > https://www.redhat.com/mailman/listinfo/redhat-list >> > >> -- >> redhat-list mailing list >> unsubscribe mailto:redhat-list-request@(protected)?subject=unsubscribe >> https://www.redhat.com/mailman/listinfo/redhat-list >>
-- redhat-list mailing list unsubscribe mailto:redhat-list-request@(protected)?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
|
|