Matching TCP Connections to PIDs? (tcptrack)
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
New contributor
add a comment |Â
up vote
0
down vote
favorite
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
New contributor
watch -n 1 lsof -i4
â RubberStamp
9 mins ago
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
New contributor
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
process tcp
New contributor
New contributor
New contributor
asked 52 mins ago
RyanW
1
1
New contributor
New contributor
watch -n 1 lsof -i4
â RubberStamp
9 mins ago
add a comment |Â
watch -n 1 lsof -i4
â RubberStamp
9 mins ago
watch -n 1 lsof -i4
â RubberStamp
9 mins ago
watch -n 1 lsof -i4
â RubberStamp
9 mins ago
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f480442%2fmatching-tcp-connections-to-pids-tcptrack%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
watch -n 1 lsof -i4
â RubberStamp
9 mins ago