From owner-freebsd-security Fri Oct 6 6:30:53 2000 Delivered-To: freebsd-security@freebsd.org Received: from kendra.ne.mediaone.net (kendra.ne.mediaone.net [24.218.227.234]) by hub.freebsd.org (Postfix) with ESMTP id 20B8C37B66D for ; Fri, 6 Oct 2000 06:30:44 -0700 (PDT) Received: from xena (xena.hh.kew.com [192.168.203.148]) by kendra.ne.mediaone.net (Postfix) with SMTP id 327638C18 for ; Fri, 6 Oct 2000 09:30:43 -0400 (EDT) Message-ID: <002101c02f99$a04b6010$94cba8c0@hh.kew.com> From: "Drew Derbyshire" To: References: <39D93044.8B0C4E69@ursine.com> <20001006153343.B232@ringwraith.office1.bg> Subject: sockstat (was Re: cvs commit: src/etc inetd.conf) Date: Fri, 6 Oct 2000 09:30:43 -0400 Organization: Kendra Electronic Wonderworks, Stoneham, MA 02180 (http://www.kew.com) MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > And to paraphrase an earlier comment by DES, > "Funny way to say sockstat | fgrep '*.*'" :) Urp! sockstat seems to truncate port numbers on the FOREIGN ADDRESS under 4.1 release ... USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS postfix smtpd 44199 4 tcp4 *.25 *.* root sshd 44004 4 tcp4 192.168.203.135.22 192.168.203.148.13 socks socks5 43989 5 tcp4 192.168.203.135.10 *.* socks socks5 43989 6 tcp4 192.168.203.135.10 192.168.203.145.10 socks socks5 43989 7 tcp4 24.218.227.234.311 205.188.6.205.5190 Looking at netstat for the ssh connection: tcp4 0 36 192.168.203.135.22 192.168.203.148.1302 ESTABLISHED To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message