| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 29 Aug 2006 21:36:54 +0200 From: Jörg Hoffmann <jh2000@...t24.eu> To: <linux-kernel@...r.kernel.org> Subject: /proc/net/tcp information drop Hello everyone (yes, i´m new at this list, just correct me if i´m wrong), I have some trouble with /proc/net/tcp and tcp6 I´m not sure if its a feature or a bug or maybe some cleanup of the cache... A long time After a connection has been established the information about the process name and the pid itself gets lost, just a - appears. My own network-monitoring tool uses netstat to get some information about the network-connections. But without the pid I can't see (I could over a few more corners but ... crap) if there are more programs at the same pid or even which program it is (maybe an undetected Trojan or just an user with more connections then allowed...) Here's a link to the netstat output http://netstat.root24.eu/netstat.php?dump=1 And to my connection-statistics (the red colored hosts/ips have no special meaning/ just shows unresolved/new connections) http://netstat.root24.eu/connmon.php Normal there is a Pid and prog name in every line... since the server is online for about a month and some connections are even so long you can see some 'holes' Greetings Jörg - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists