List Process tied to Port: Difference between revisions
Jump to navigation
Jump to search
(Created page with "# Determine the <tt>'''tcpcb'''</tt> (TCP Control Block) tied to the port. ## <tt>'''# netstat -Aan -f inet'''</tt> ##") |
No edit summary |
||
Line 1: | Line 1: | ||
== List a Processes tied to a Port == | |||
# Determine the <tt>'''tcpcb'''</tt> (TCP Control Block) tied to the port. | # Determine the <tt>'''tcpcb'''</tt> (TCP Control Block) tied to the port. | ||
## <tt>'''# netstat -Aan -f inet'''</tt> | ## <tt>'''# netstat -Aan -f inet'''</tt> | ||
## | ## The output should be similar to the following. | ||
<tt>'''<pre>Active Internet connections (including servers) | |||
PCB/ADDR Proto Recv-Q Send-Q Local Address Foreign Address (state) | |||
f1000e0000527bb8 tcp 0 0 *.* *.* CLOSED | |||
f1000e00005233b8 tcp4 0 0 *.* *.* CLOSED | |||
f1000e001380dbb8 tcp4 0 0 *.13 *.* LISTEN | |||
f1000e0007a133b8 tcp 0 0 *.21 *.* LISTEN | |||
f1000e0000f28bb8 tcp6 0 0 *.22 *.* LISTEN | |||
f1000e0000f283b8 tcp4 0 0 *.22 *.* LISTEN</pre>'''</tt> | |||
## The first column <tt>'''PCB/ADDR'''</tt> will be used. | |||
# The <tt>'''rmsock'''</tt> command will be used to identify the process associated with the TCPCB. | |||
## <tt>'''# rmsock <PCB/ADDR> tcpcb'''</tt> | |||
## The output will be similar to the following. | |||
### <tt>'''The socket 0xf1000e0000527808 is being held by proccess 5505230 (rmcd).'''</tt> | |||
## Example. | |||
### <tt>'''# rmsock f1000e0000527bb8 tcpcb'''</tt> | |||
== Further Reading == | |||
* [http://aixblogs.blogspot.com/2009/03/using-netstat-and-rmsock-to-identify.html Using netstat and rmsock to Identify Processes] | |||
[[Category: AIX]] |
Revision as of 12:26, 13 January 2016
List a Processes tied to a Port
- Determine the tcpcb (TCP Control Block) tied to the port.
- # netstat -Aan -f inet
- The output should be similar to the following.
Active Internet connections (including servers) PCB/ADDR Proto Recv-Q Send-Q Local Address Foreign Address (state) f1000e0000527bb8 tcp 0 0 *.* *.* CLOSED f1000e00005233b8 tcp4 0 0 *.* *.* CLOSED f1000e001380dbb8 tcp4 0 0 *.13 *.* LISTEN f1000e0007a133b8 tcp 0 0 *.21 *.* LISTEN f1000e0000f28bb8 tcp6 0 0 *.22 *.* LISTEN f1000e0000f283b8 tcp4 0 0 *.22 *.* LISTEN
- The first column PCB/ADDR will be used.
- The rmsock command will be used to identify the process associated with the TCPCB.
- # rmsock <PCB/ADDR> tcpcb
- The output will be similar to the following.
- The socket 0xf1000e0000527808 is being held by proccess 5505230 (rmcd).
- Example.
- # rmsock f1000e0000527bb8 tcpcb