Finding out whats using a port

Discussion in 'Technical' started by tcsmith001, Mar 1, 2014.

  1. tcsmith001

    tcsmith001 New Member

    Hi,

    I have configured my iptables and just thought I'd look at the logs to check a few things out. I see these types of entries however:

    Code:
    Mar  1 20:49:15 xxxxxxxx kernel: [1022778.272100] Dropped outgoing: IN= OUT=eth0 SRC=xx.xx.xx.xx DST=87.117.237.100 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=19834 DF PROTO=TCP SPT=60381 DPT=53 WINDOW=14600 RES=0x00 SYN URGP=0
    What I would like to know is how can I determine what process is calling this? I have run netstat and nothing is bound to this port.

    As a secondary point, the IP address resolves to ns2.externalresolver.rapidswitch.com so I am thinking that this should be allowed?
     
    tcsmith001, Mar 1, 2014
    #1
  2. florian030

    florian030 Well-Known Member HowtoForge Supporter

    You are dropping outgoing connections to port 53 (DPT=53). Port 53 is used for dns.
     
    florian030, Mar 2, 2014
    #2

Share This Page