Re: Where is the packet coming from

Mike <[email protected]>
Newsgroups gmane.user-groups.linux.ottawa.general
Message-ID <[email protected]>
> netstat -p option will show you the process that owns a particular
> socket.

 I'd missed the -p flag when I ran netstat 

How can I link the tcpdump output with the socket? 

One reference suggests that lsof [email protected] should do it but it comes back 
empty

There seems to be a burst of 10 packets every 2 minutes


> 
> It would seem Mike, on Sun, Jan 24, 2010 at 04:20:33PM -0500, wrote:
> > I am trying to locate the source of some ICMP packets being sent to the 
> > gateway
> > 
> > tcpdump   shows this info 
> > 
> >    xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 5, length 64
> > 16:02:41.235291 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto 
ICMP 
> > (1), length 84)
> >     xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 6, length 
64

 
-- 
Collector of vintage computers http://www.ncf.ca/~ba600
-- 
OCLUG general discussion list
[email protected]
http://oclug.on.ca/mailman/listinfo/oclug
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.