在我的Mac(10.11.5)中,我发现一个奇怪的php服务器正在监听我的本地主机:
$ curl -i localhost
HTTP/1.1 200 OK
Date: Mon, 11 Jul 2016 10:05:11 GMT
Server: Apache/2.4.18 (Unix) PHP/5.6.23
Content-Location: index.html.en
Vary: negotiate
TCN: choice
Last-Modified: Mon, 11 Jun 2007 18:53:14 GMT
ETag: "2d-432a5e4a73a80"
Accept-Ranges: bytes
Content-Length: 45
Content-Type: text/html
<html><body><h1>It works!</h1></body></html>
但是我找不到任何php进程:
$ ps -ef | grep php
501 724 500 0 6:06PM ttys000 0:00.00 grep php
以及任何可疑的进程监听端口80:
$ lsof -i:80
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
Google 526 Sona 202u IPv4 0x9de3b88faf523ff9 0t0 TCP sayakiss-mbp.lan:49823->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 219u IPv4 0x9de3b88faf521c19 0t0 TCP sayakiss-mbp.lan:49827->72-165-119-17.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 226u IPv4 0x9de3b88faf510e09 0t0 TCP sayakiss-mbp.lan:49808->pixel.quantserve.com:http (CLOSED)
Google 526 Sona 236u IPv4 0x9de3b88faf523701 0t0 TCP sayakiss-mbp.lan:49824->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 237u IPv4 0x9de3b88faf522e09 0t0 TCP sayakiss-mbp.lan:49825->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 238u IPv4 0x9de3b88faf522511 0t0 TCP sayakiss-mbp.lan:49826->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 239u IPv4 0x9de3b88faf53ee09 0t0 TCP sayakiss-mbp.lan:49828->72-165-119-17.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 240u IPv4 0x9de3b88faf53f701 0t0 TCP sayakiss-mbp.lan:49829->72-165-119-17.dia.static.qwest.net:http (CLOSED)
QQ 640 Sona 11u IPv4 0x9de3b88f96e3fff9 0t0 TCP sayakiss-mbp.lan:49717->123.151.10.189:http (ESTABLISHED)
QQ 640 Sona 13u IPv4 0x9de3b88f96e3fff9 0t0 TCP sayakiss-mbp.lan:49717->123.151.10.189:http (ESTABLISHED)
我的问题:
- 如何找到监听本地主机的进程?
- 如何找到由php返回的文件?(如您所见,php返回的内容包含
It works!
,因此必须有一个包含该文本的文件...)