tcpdump shows tcp/udp/raw/icmp packets inbound/outbound.
but it won't tell me what PID sent or received them..
if i'll monitor tcpdump , and i'll use 'netstat -e' , i will be able to know the INODE/PID of the process... for TCP only.
i'm looking for a solution to know which PID sent/received everything... tcp/udp/raw/icmp.
if netstat could "stream" its data.. and showed tcp/udp/icmp/raw .. it would be a good solution.
it should run under centos5, thanks!