The - in the PID column means no process is using the socket. That typicly means that the kernel is holding onto the port until some timeout is reached. For example, tcp connections in the TIME_WAIT state will show up with a - in the PID column. > -----Original Message----- > From: redhat-list-bounces@xxxxxxxxxx > [mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of > redhat@xxxxxxxxxxxxxx > Sent: Friday, July 13, 2007 10:45 AM > To: redhat-list@xxxxxxxxxx > Subject: Determine what service listening on port > > I have a RHEL ES3 server that has three listening udp ports > open. I'm having a hard time trying to determine what > service opened them up. The ports are udp 1020,1022,1023. I > have tried to following: "netstat -lp", the PID/Program name > column just shows a -, "fuser -n udp 1020", nothing > returned, lsof -i :1020. nothing returned. I have shut down > a few services in an attempt to discover who opened the > ports, but no luck. Anything I may have forgotten? > > Thanks > > -- > redhat-list mailing list > unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe > https://www.redhat.com/mailman/listinfo/redhat-list > -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
