Re: [PLUG] Tools for analyzing network traffic from personal computer?

[Michael Lazin <microlaser@gmail.com>]

Well for a server I am fond of lsof for finding malware because it's output includes the PID as well as the open port.  If you see something running on a port that shouldn't be open you can search /proc for the directory that corresponds with the PID and see what the path of the portbinding script is.

On Wed, Sep 3, 2014 at 6:12 PM, Paul Walker <starsinmypockets@gmail.com> wrote:

I'm running OSX on a laptop and trying to get a better handle on what sort of network traffic is happening on it. I'm `using netstat -t -a` which outputs a very long list (600+) of tcp / udp connections. I have a psuedo-professional curiosity about what all this stuff is. I'm wondering if there are any tools or resources folks would recommend that could help me analyze the network traffic, to detect malware for instance, and also just as an educational exercise. 

Cheers,

Paul

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

--
Michael Lazin

to gar auto estin noein te kai ennai

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug