How to find which process generating random port

jagafirst · 10-16-2014, 01:10 AM

Hi

In my Linux server there is continuous SYNC packets are transmiting, please help me to find out which service is generating traffic in my server.

10:57:40.042491 IP 107.150.42.123.45000 > 10.200.2.10.51385: Flags [R.], seq 0, ack 636954941, win 0, length 0
10:57:40.042606 IP 10.200.2.10.51386 > 107.150.42.123.45000: Flags [S], seq 3131847555, win 14600, options [mss 1460,sackOK,TS val 3271985 ecr 0,nop,wscale 7], length 0
10:57:40.310085 IP 107.150.42.123.45000 > 10.200.2.10.51386: Flags [R.], seq 0, ack 3131847556, win 0, length 0
10:57:40.310160 IP 10.200.2.10.51387 > 107.150.42.123.45000: Flags [S], seq 3040208328, win 14600, options [mss 1460,sackOK,TS val 3272253 ecr 0,nop,wscale 7], length 0

Thanks for Helping.

SAbhi · 10-16-2014, 01:16 AM

which app is showing these logs? grep for it using ps..

jagafirst · 10-16-2014, 01:51 AM

Hi Sabhi,

Its the output of tcpdump and also i tried netstat -antlp command but not find any result..

---------- Post added 10-16-14 at 12:21 PM ----------

Hi Sabhi,

Its the output of tcpdump and also i tried netstat -antlp command but not find any result..

SAbhi · 10-16-2014, 02:53 AM

Ah ok i am not an expert with that but these might help:

http://www.computerhope.com/unix/tcpdump.htm
http://noahdavids.org/self_published/tcpdump.html