I have pfSense set up to block outgoing connections on ports that are not specified in a config. Now, looking through the firewall logs, I see various ports that are being used and blocked for outgoing traffic. I have access to the machine that is generating the outgoing traffic that is blocked.
I am able to see what ports Ubuntu is listening on using the command
netstat -nputw. It also shows the program that is using the port which is what I'm looking for except for outgoing traffic. Does anybody know how I can tell what program is responsible for outgoing traffic on say port 6969?
Also, can I tell which program sends traffic to certain IP addresses?