How to identity which container that calling IP on port

[Orwell]

Hello all,

I'm running many docker-compose stack on my Server.
My Firewall show trafic from this Server to another on port 137.
How can I identify which container running on my Server doing these calls on port 137?

Thanks for your reply

 

[dos2unix]

Do you have lsof installed?

lsof -i | grep 137

 

[Orwell]

Thank you dos2unix,

Yes lsof is installed but I already checked and this command did not return anything.
Moreover thé port 137 is an UDP port.

 

[dos2unix]

Try...

lsof -i udp | grep 137

Docker makes it a little more complicated.

docker inspect

should show all ports a container is using.
Also your Dockerfile will likely have ports to expose as well.

You say from this server to another. That can only happen if the other server is listening to port 137.

Typically port 137 is used for NetBios name service. This is a MS Windows service.