Matching TCP Connections to PIDs? (tcptrack)
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
asked 52 mins ago
RyanW
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
0
down vote
favorite
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
asked 52 mins ago
RyanW
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
watch -n 1 lsof -i4
– RubberStamp
9 mins ago
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
asked 52 mins ago
RyanW
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
With tcptrack, I'm able to monitor and see a bunch of connections happening periodically between various IPs on the local machine to a remote machine. The connections are SSH connections (can confirm by checking SSHD logs on the remote system), and they look similar to this:
Client Server State Idle A Speed
(local IP):36448 (remote IP):22 SYN_SENT 12s 0 B/s
(local IP):56666 (remote IP):22 SYN_SENT 34s 0 B/s
The connections appear to be instantaneous and the client port changes every time, so tools such as fuser haven't helped and tcptrack doesn't appear to have an option for displaying PIDs. What I'd need is essentially the output of tcptrack, but with the PID included with each connection - is there such a tool available?
process tcp
process tcp
asked 52 mins ago
RyanW
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 52 mins ago
RyanW
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 52 mins ago
RyanW
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 52 mins ago
RyanW
1
asked 52 mins ago
RyanW
1
1
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
RyanW is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
watch -n 1 lsof -i4
– RubberStamp
9 mins ago
add a comment |Â
watch -n 1 lsof -i4
– RubberStamp
9 mins ago
watch -n 1 lsof -i4– RubberStamp
9 mins ago
watch -n 1 lsof -i4– RubberStamp
9 mins ago
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
RyanW is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f480442%2fmatching-tcp-connections-to-pids-tcptrack%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
watch -n 1 lsof -i4– RubberStamp
9 mins ago