which program is this port belongs to ?

• Which processes are listening on a specific port (e.g. port 80)

  swap out "80" for your port of interest. Can use port number or named ports e.g. "http"

  This is sample output - yours may be different.

  
  

  4
  lsof -iTCP:80 -sTCP:LISTEN
  indexsmithy · 2018-04-07 16:20:25 3
  • Submit alternative
  • Report as malicious
  • Report as a duplicate
• Which processes are listening on a specific port (e.g. port 80)

  This is sample output - yours may be different.

  
  

  -2
  netstat -nap|grep 80|grep LISTEN
  bakhru · 2019-07-28 01:08:45 2
  • Submit alternative
  • Report as malicious
  • Report as a duplicate

You can also add "-p" to netstat. Still a useful tip.

amosshapira · 630 weeks and 1 day ago

this seems to work backwards? when I run it I get up some instances of opera, but no apache which runs a webserver on port 80....

Svish · 629 weeks and 6 days ago

Opera doesn't listen on port 80 .... lsof is a command to check for opened files (List opened files) , and i used it to check what file/service is locking my port on listening. that because i didn't see any service that might match that port .. and there were too many of them to start searching one by one about what they do.. it also displaying the user that is using it ... (if you have multipul users in your pc / server) and if some script is listening on some port ( say perl script on port 23 telnet )- the command will show you the name of the script that is using this port at the very moment.

ar_levi · 629 weeks and 4 days ago

Or if you run Solaris and don't want to install lsof: pfiles $(ls /proc) 2>/dev/null | nawk '{if(/^[0-9]/){x=$1;sub(/:/,"",x)}if(/port: 80/){y=x}}END{print y}'

unixmonkey3280 · 629 weeks and 2 days ago

I know Opera doesn't listen on port 80. It is connected to port 80 elsewhere. And that was my point. I thought your command would listen the programs I was running that was currently listening on a certain port. Like Apache, which currently is doing exactly that. But instead your command listed some lines for Opera and what ip addresses it was connected to a port 80.

Svish · 629 weeks and 2 days ago

I have the same problem as @Svish. Running lsof -i tcp:80 on Ubuntu 11.04 only reports network files that are connected to remote machines on port 80. If I try lsof -i 6tcp:80 it reports nothing. Trying netstat -t -l -n -p reveals: tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN - with no program associated with whatever is listening on port 80. Apache version: Server version: Apache/2.2.17 (Ubuntu)

tamouse · 504 weeks and 3 days ago

Further reading reveals that this command must be run as root to report the information wanted: http://www.commandlinefu.com/commands/view/144/find-process-associated-with-a-port#comment

tamouse · 504 weeks and 3 days ago

You must be signed in to comment.