Re: [Sheflug] igmp packets...... it's getting worse....

[Richard Stevenson <nospam [at] team.xtra.co.nz>]

On Wed, 15 Nov 2000, ross wrote:

> On Wednesday 15 November 2000 21:01, you wrote:
> > OK... try the easy way.  See if you've got lsof installed on your
> > system
> 
> ok.... yes i have....... i ran it and it gave all sorts of stuff..............
> what should i look for?
> it looks like an extended ps -A !

It's got lots of stuff in it :)  Try this:

lsof -nP | grep IPv4

-n prevents conversion of IP addresses to hostnames
-P prevents port numbers being converted to service names

That'll tell you what's doing what in the IP world... here's the output
from my system:

eggdrop     347 richard    4u  IPv4       6383             TCP 202.27.185.136:1241->210.55.176.24:6667 (ESTABLISHED)
x-window- 25288 richard    4u  IPv4      37386             UDP 127.0.0.1:1091->127.0.0.1:5555
x-window- 25288 richard    5u  IPv4      37405             UDP 127.0.0.1:1092->127.0.0.1:5555
netscape  26368 richard    4u  IPv4      37386             UDP 127.0.0.1:1091->127.0.0.1:5555
netscape  26368 richard    5u  IPv4      37405             UDP 127.0.0.1:1092->127.0.0.1:5555
netscape  26368 richard   24u  IPv4      44572             TCP 202.27.185.136:2807->213.205.138.210:80 (ESTABLISHED)
netscape  26368 richard   26u  IPv4      44568             TCP 202.27.185.136:2806->213.205.138.210:80 (ESTABLISHED)
netscape  26368 richard   28u  IPv4      44573             TCP 202.27.185.136:2808->213.205.138.210:80 (ESTABLISHED)
netscape  26368 richard   29u  IPv4      44574             TCP 202.27.185.136:2809->213.205.138.210:80 (ESTABLISHED)
netscape  26369 richard    4u  IPv4      37386             UDP 127.0.0.1:1091->127.0.0.1:5555
netscape  26369 richard    5u  IPv4      37405             UDP 127.0.0.1:1092->127.0.0.1:5555
pine      26432 richard    4u  IPv4      41943             TCP 202.27.185.136:2746->203.96.92.132:143 (ESTABLISHED)
irc       26445 richard    4u  IPv4      41091             TCP 202.27.185.136:2567->198.63.2.192:6667 (ESTABLISHED)

Depending on how it's been compiled, you may need to run it as root to get
information on *all* files - there's compile-time option to allow anyone
to get information on all open files in the system, instead of just root.

Cheers

Richard


-- 
Richard Stevenson, Systems Support Specialist, Telecom Xtra
Phone: +64 9 355 5231   Mobile: +64 25 290 3101   Pager: +64 26 100 155

Stamp out software piracy: install Linux today! <http://www.linux.org>

---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.