RE: Compromised FBSD/Apache

From: Boyan Krosnov <bkrosnov(at)lirex.bg>
Date: Mon Nov 25 2002 - 13:10:16 EST

fuser -v 80/tcp
lsof -i tcp:80
netstat -apn | egrep '^tcp.+:80'

All these work on a pure debian gnu/linux stable here, and give you at least the pid of the process. fuser is my favorite.

BR,
Boyan Krosnov, CCIE#8701
http://boyan.ludost.net/
Just another techie speaking for himself

> -----Original Message-----
> From: Thomas C. Meggs [mailto:tom@plik.net]
> Sent: Friday, November 22, 2002 6:28 PM
> To: Micheal Patterson
> Cc: incidents@securityfocus.com
> Subject: Re: Compromised FBSD/Apache
>
>
> Hi,
>
> Out of curiosity what is the Linux and Solaris equivalents for doing

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Nov 26 01:04:43 2002