In the output of
nmap -p- localhost I get an unknown open tcp port, that's different at each reboot. How can I determine which process opened it and listens through it. I tried many of the usual tools (
lsof) but I cannot find the culprit. Eg.
sudo netstat -pan -Ainet | grep <PORT> gives no PID/Program name:
tcp 0 0 0.0.0.0:<PORT> 0.0.0.0:* LISTEN -
Maybe I should analyze the startup sequence? But how so?
Could anyone help?