On Mon, Dec 27, 2010 at 2:06 PM, Meenoo Shivdasani meenoo@gmail.com wrote:
On Mon, Dec 27, 2010 at 9:30 AM, S Mathias smathias1972@yahoo.com wrote:
Dec 27 14:11:46 a kernel: [ 6336.992320] O_D_LOG: IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=61533 DF PROTO=TCP SPT=37263 DPT=25 WINDOW=32792 RES=0x00 SYN URGP=0
but where or how could i find out, that what process sends these packets?
You can check up the process number using netstat's output. These packets come from an established TCP connection between your SMTP server (DST=127.0.0.1, DPT=25) and a local process (SRC=127.0.0.1, SPT=37263) having source port = 37263. Something like "netstat -ntp | grep 37263" should do.