RSS Feed

Network Connections

Created: 02.06.2023

For Mac OS netstat there is no -o switch, so I’ve used netstat -ban.

sudo lsof -i -n -p

lsof -i :443 will show you all connections associated with port 443, commonly used for TLS communication. Sheward, Mike. Hands-on Incident Response and Digital Forensics (p. 163). BCS Learning & Development Limited. Kindle Edition.

img1 The first column will give a hint about what the application responsible for this connection is. To get the full path to the app executable, use ps -fp <PID> command:



Expand… Something here