Very Computer

> our firewall tells me that a machine is trying to send out packets on 2
> different ports every 5 to 10 minutes.
> Is there a easy way to find out the application that sends this packets ?

> Thank you
> Andreas

>>Hello,

>>our firewall tells me that a machine is trying to send out packets on 2
>>different ports every 5 to 10 minutes.
>>Is there a easy way to find out the application that sends this packets ?

>>Thank you
>>Andreas

> Is it a machine of your local net?

> Magnus

> it's a local machine that tries to contact an external address over the
> ports 137 and 415. 137 is SMB an I have samba running, but I don't know
> why it tries to go out so I anna find out the exact process that sends
> the pakets ( It's not shure that it is samba that send them as long I
> don't find the pid ). The other port is 451, also a SMB over IP port,
> but the samba version I have installed does not support this port, so I
> need to know who sends.

> My machine is a Suse 7.2 with 2.4.18 Kernel

> Bye
> Andreas

> Magnus Mager schrieb:

>>>Hello,

>>>our firewall tells me that a machine is trying to send out packets on 2
>>>different ports every 5 to 10 minutes.
>>>Is there a easy way to find out the application that sends this packets ?

>>>Thank you
>>>Andreas

>> Is it a machine of your local net?

>> Magnus

>>Hello Magnus,

>>it's a local machine that tries to contact an external address over the
>>ports 137 and 415. 137 is SMB an I have samba running, but I don't know
>>why it tries to go out so I anna find out the exact process that sends
>>the pakets ( It's not shure that it is samba that send them as long I
>>don't find the pid ). The other port is 451, also a SMB over IP port,
>>but the samba version I have installed does not support this port, so I
>>need to know who sends.

>>My machine is a Suse 7.2 with 2.4.18 Kernel

>>Bye
>>Andreas

>>Magnus Mager schrieb:

>>>>Hello,

>>>>our firewall tells me that a machine is trying to send out packets on 2
>>>>different ports every 5 to 10 minutes.
>>>>Is there a easy way to find out the application that sends this packets ?

>>>>Thank you
>>>>Andreas

>>>Is it a machine of your local net?

>>>Magnus

> You should try "netstat --tcp -p" on that host in the hope, that the port
> is hold open by the program. But I suppose you've tried this already...

> Magnus