使用されているプロトコルを調べる

ポートを使用しているプロトコルを調べる †

nmap等の結果、何に使用されているか分からないポートで流れているプロトコルを調べるには以下のコマンドを使う。

netstat -nap

情報が大量に出てくる場合はgrep等で適度に絞り込む

# netstat -nap | grep 8009
tcp        0      0 10.208.39.1:40953           10.208.39.1:8009            ESTABLISHED 23886/httpd         
tcp        0      0 10.208.39.1:40860           10.208.39.1:8009            ESTABLISHED 2677/httpd          
tcp        0      0 10.208.39.1:40865           10.208.39.1:8009            ESTABLISHED 27326/httpd         
tcp        0      0 10.208.39.1:40988           10.208.39.1:8009            ESTABLISHED 12474/httpd         
tcp        0      0 10.208.39.1:40960           10.208.39.1:8009            ESTABLISHED 12469/httpd         
tcp        0      0 10.208.39.1:41962           10.208.39.1:8009            ESTABLISHED 13783/httpd         
tcp        0      0 10.208.39.1:41893           10.208.39.1:8009            ESTABLISHED 13797/httpd         
tcp        0      0 10.208.39.1:42214           10.208.39.1:8009            ESTABLISHED 14147/httpd         
tcp        0      0 10.208.39.1:42043           10.208.39.1:8009            ESTABLISHED 13926/httpd         
tcp        0      0 10.208.39.1:42747           10.208.39.1:8009            ESTABLISHED 13554/httpd         
tcp        0      0 10.208.39.1:40863           10.208.39.2:8009            ESTABLISHED 23886/httpd         
tcp        0      0 10.208.39.1:43346           10.208.39.2:8009            ESTABLISHED 14147/httpd         
tcp        0      0 10.208.39.1:41718           10.208.39.2:8009            ESTABLISHED 12469/httpd         
tcp        0      0 10.208.39.1:41688           10.208.39.2:8009            ESTABLISHED 2677/httpd          
tcp        0      0 10.208.39.1:42161           10.208.39.2:8009            ESTABLISHED 13554/httpd         
tcp        0      0 10.208.39.1:42141           10.208.39.2:8009            ESTABLISHED 13926/httpd         
tcp        0      0 :::8009                     :::*                        LISTEN      12311/java          
tcp        0      0 :::18009                    :::*                        LISTEN      3735/tibcoadmin_mfr 
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:40988    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:40960    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:42043    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:40860    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:41893    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:40865    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:42747    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:40953    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:41962    ESTABLISHED 12311/java          
tcp        0      0 ::ffff:10.208.39.1:8009     ::ffff:10.208.39.1:42214    ESTABLISHED 12311/java