Solaris Find Process Id tied to IP Address

Recently I needed to find out who is connecting to an Oracle database and at the same time I wanted to see the load the specific connection add to the CPU. So in short I needed IP Address and Port tied to a Unix Pid.

I wrote this quick and dirty python script.

1
#!/usr/bin/python
2
import subprocess
3

4
## No doubt you would want to exclude some non local or expected IP addresses
5
excludeIPs="10.2.16.86|10.2.16.62|10.2.16.83|\*.\*"
6

7
p = subprocess.Popen("/usr/bin/netstat -an | grep 1521 | awk '{print $2}' | egrep -v '" + excludeIPs + "'", stdout=subprocess.PIPE, shell=True)
8
nonlocals= p.stdout
9

10
if nonlocals <> '':
11
  p = subprocess.Popen("pfiles `ls /proc` 2>/dev/null", stdout=subprocess.PIPE, shell=True)
12
  try:
13
    outs, errs = p.communicate()
14
  except TimeoutExpired:
15
    p.kill()
16
    outs, errs = p.communicate()
17

18
  pfiles = outs
19

20
  for line in nonlocals:
21
    line=line.strip()
22
    (IP,port) = line.rsplit('.',1)
23
    print ("Going to find PID for connection with IP %s and port %s" % (IP,port) )
24

25
    for line in pfiles.splitlines():
26
      if line[:1].strip() <> '':
27
        pid = line
28
      if "port: " + port in line:
29
        print pid

I plan to enhance this script a little bit but for now it did exactly what I needed.