ptrap
ptrap copied to clipboard
Find out which process sends packet to a certain <ip>:<port> combination
Rsyslog has changed where the logs are being written to. More info here https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/794727
this change makes ptrap work on older distros like RHEL5 where "grep -E" works differently and doesn't provide intended result.
on older distros "grep -E" doesn't work as the script intends. the solution - which also works in NEW distros, is to use "grep -P" instead; I've tested it on...