[Novalug] Finding PID That Is Querying DNS
kevin at pheared.net
Wed Oct 3 06:14:19 EDT 2007
On Wed, Oct 03, 2007 at 12:43:46AM -0500, Bernie Hoefer wrote:
> For connections that are established and active, I'd normally use
> netstat to see the process ID (PID). However, that didn't work. It
> shows the connection, but doesn't list the PID.
> > workstation:~ # netstat -npcuve
> > Active Internet connections (w/o servers)
> > Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
> > udp 0 0 192.168.1.2:2038 192.168.1.1:53 ESTABLISHED 0 1993246 -
Try running it as root. You need superuser privileges to see this
information on sockets you don't own.
More information about the Novalug