Re: Compromised FBSD/Apache

From: Adam Sampson (azzat_private)
Date: Mon Nov 25 2002 - 10:22:30 PST

  • Next message: Boyan Krosnov: "RE: Compromised FBSD/Apache"

    "Thomas C. Meggs" <tomat_private> writes:
    
    > Out of curiosity what is the Linux and Solaris equivalents for doing
    > this?
    
    With Linux net-tools, netstat has a -p option for this. "netstat
    -nltp" will list listening TCP sockets and the processes that are
    using them:
    
    tcp        0      0 0.0.0.0:80        0.0.0.0:*   LISTEN    230/httpd    
    
    I believe lsof can do the same sort of thing on both Linux and
    Solaris (and a number of other systems).
    
    -- 
    Adam Sampson <azzat_private>                  <URL:http://azz.us-lot.org/>
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Nov 25 2002 - 21:55:09 PST