Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

The source port changes rapidly, from 49xxx to 6xxxx. I tried to use lsof -i udp, and see there's process named mDNSRespo which holds a lot of udp sockets. However, none of these sockets' ports are of source ports of sockets broadcasting packets.

Is there a utility to find out which process is doing this?

share|improve this question

2 Answers 2

Its probably Bonjour, and its basically throwing out broadcasts to advertise its presence. You can use good old netstat, either in cli or through network utility to determine this. If you're using cli, also consider using grep to filter through the results, and the -b switch to display the binary's name - I'd use something like netstat -abn | grep 255.255.255.255 - which if i recall should show all connections, and list the binaries and ip addresses, and greps for that ip address.

share|improve this answer
    
I stopped Bonjour, and it still keeps broadcasting.. –  codable Jul 19 '12 at 2:33
    
What does netstat say? –  Journeyman Geek Jul 19 '12 at 2:34
1  
Unlike NetBIOS, Bonjour exclusively uses multicasts, not broadcasts. –  Spiff Jul 19 '12 at 2:57

Found this same issue today, check to see if "Remote Mouse" is installed, that was the culprit on my network.

share|improve this answer
    
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post. –  MaQleod May 1 at 19:28
    
This seems like a potentially helpful, albeit not ideal, answer to me. –  Jason C Jul 8 at 0:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.