LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-27-2004, 06:14 PM   #1
andy753421
Member
 
Registered: Apr 2004
Distribution: Gentoo
Posts: 65

Rep: Reputation: 15
unwanted port scans


For some reason my computer is sending out pings to all ip's on a certain port and I dont want it to. I havent been able to figure out which program they are comming from, is there any way to see what programs are sending pings to specific ip addresses?
 
Old 09-28-2004, 05:55 PM   #2
hob
Senior Member
 
Registered: Mar 2004
Location: Wales, UK
Distribution: Debian, Ubuntu
Posts: 1,075

Rep: Reputation: 45
Take a look at 'netstat'. Pings are of the network type 'raw' rather tcp or udp.

This command may work for you (as root, to see all activity):

netstat --ip --raw -anp

You'll get output like this:

raw 0 0 0.0.0.0:1 192.168.1.10:* 7 3698/ping

The last column is the process ID of the program making the connection, and the name of the program after the slash.

Then you can use 'ps' to get full details on the process whose ID you found, like this:

ps -A u | grep '3698'

Which will show the full command as the last column:

hob 3698 0.0 0.0 2028 416 pts/1 S 23:53 0:00 ping 192.168.1.10
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
port scans - iptables epoo Linux - Security 9 07-19-2015 12:44 PM
Multiple Port Scans of 3943 alerola Linux - Security 3 08-08-2004 05:02 PM
Port scans!!! tarballedtux Linux - Security 4 10-29-2002 07:18 AM
Port scans KevStA Linux - Networking 2 05-27-2002 05:38 PM
Linux Port Scans or Attacks ? Bubba Linux - Security 4 04-04-2001 04:17 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 08:51 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration