Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The source port changes rapidly, from 49xxx to 6xxxx. I tried to use lsof -i udp, and see there's process named mDNSRespo which holds a lot of udp sockets. However, none of these sockets' ports are of source ports of sockets broadcasting packets.

Is there a utility to find out which process is doing this?

share|improve this question

Found this same issue today, check to see if "Remote Mouse" is installed, that was the culprit on my network.

share|improve this answer
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post. – MaQleod May 1 '14 at 19:28
This seems like a potentially helpful, albeit not ideal, answer to me. – Jason C Jul 8 '14 at 0:22

Its probably Bonjour, and its basically throwing out broadcasts to advertise its presence. You can use good old netstat, either in cli or through network utility to determine this. If you're using cli, also consider using grep to filter through the results, and the -b switch to display the binary's name - I'd use something like netstat -abn | grep - which if i recall should show all connections, and list the binaries and ip addresses, and greps for that ip address.

share|improve this answer
I stopped Bonjour, and it still keeps broadcasting.. – codable Jul 19 '12 at 2:33
What does netstat say? – Journeyman Geek Jul 19 '12 at 2:34
Unlike NetBIOS, Bonjour exclusively uses multicasts, not broadcasts. – Spiff Jul 19 '12 at 2:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .