How to reveal which service initialize tcp connection ?

bobbera · 02-08-2009, 06:39 AM

Hi ,

I have a production server which tries every few minutes to send TCP packets to the remote host ( 3034 port ) . Due to firewall all these packets are being blocked and a result any socket is not established and I cannot figure out who is the program tries to initialize the process .
How to find out which one ?

Neither sniffer did not help .

Thanks . Vlad.

unSpawn · 02-08-2009, 06:57 AM

On the sender host try 'lsof -P -n -i :3034'. TCP/3034 is registered as "osmosis-aeea" whatever the IANA that means.

raskin · 02-08-2009, 01:46 PM

netstat -nlp (as root) may also be useful.