[CentOS] process identification

Fri Sep 19 14:17:00 UTC 2014
Francisco Puente <fpuente00 at gmail.com>

lsof -i -P | grep LISTEN

> -----Original Message-----
> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of
> kqt4at5v at gmail.com
> Sent: viernes, 19 de septiembre de 2014 11:15
> To: CentOS mailing list
> Subject: Re: [CentOS] process identification
>
> On Fri, 19 Sep 2014, Reindl Harald wrote:
>
> >
> > Am 19.09.2014 um 15:58 schrieb kqt4at5v at gmail.com:
> >> On Fri, 19 Sep 2014, Reindl Harald wrote:
> >>
> >>> Am 19.09.2014 um 15:45 schrieb kqt4at5v at gmail.com:
> >>>> I am running CentOS 6.5. I know this is not a CentOS specific problem.
> >>>> Netstat shows several open ports and no pid.
> >>>>
> >>>> tcp    0  0 *:48720                 *:*                 LISTEN      - tcp    0  0
> *:43422
> >>>> *:*                 LISTEN      -
> >>>> udp    0  0 *:50216                 *:*
> >>>
> >>> alias netstat='/bin/netstat --numeric-hosts --numeric-ports --notrim --programs -u -
> t'
> >>>        /bin/netstat
> >>>
> >>> [root at openvas:~]$ /bin/netstat --numeric-hosts --numeric-ports --notrim --programs -
> u -t -l
> >>> Aktive Internetverbindungen (Nur Server)
> >>> Proto Recv-Q Send-Q Local Address               Foreign Address             State
> PID/Program name
> >>> tcp        0      0 127.0.0.1:9390              0.0.0.0:*                   LISTEN
> 5454/openvasmd
> >>> tcp        0      0 127.0.0.1:9391              0.0.0.0:*                   LISTEN
> 5473/openvassd
> >>> tcp        0      0 0.0.0.0:443                 0.0.0.0:*                   LISTEN
> 5438/gsad
> >>> tcp        0      0 0.0.0.0:10022               0.0.0.0:*                   LISTEN
> 1177/sshd
> >>
> >> This netstat show exactly the same
> >
> > boah then call it as root, for a unprivileged user it shows only
> > executeable and PID of own processes for good reasons
> >
> >> Lsof does not show these ports
> >
> > because you just have no permissions
> >
> >
>
> My bad I should have said. My original commands were
> sudo netstat -tulpn | less
> sudo lsof | less
> I have several CentOS 6.5 machines and only one shows these odd ports.
> I have also run chkrootkit and used clamscan to check filesystems.
> It may be harmless but my curiosity is killing me.
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos