Dans mon Mac(10.11.5), je trouve un étrange serveur php qui écoute mon localhost :
$ curl -i localhost
HTTP/1.1 200 OK
Date: Mon, 11 Jul 2016 10:05:11 GMT
Server: Apache/2.4.18 (Unix) PHP/5.6.23
Content-Location: index.html.en
Vary: negotiate
TCN: choice
Last-Modified: Mon, 11 Jun 2007 18:53:14 GMT
ETag: "2d-432a5e4a73a80"
Accept-Ranges: bytes
Content-Length: 45
Content-Type: text/html
<html><body><h1>It works!</h1></body></html>
Mais je ne trouve pas de processus php :
$ ps -ef | grep php
501 724 500 0 6:06PM ttys000 0:00.00 grep php
Et tout processus suspect écoutant le port 80 :
$ lsof -i:80
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
Google 526 Sona 202u IPv4 0x9de3b88faf523ff9 0t0 TCP sayakiss-mbp.lan:49823->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 219u IPv4 0x9de3b88faf521c19 0t0 TCP sayakiss-mbp.lan:49827->72-165-119-17.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 226u IPv4 0x9de3b88faf510e09 0t0 TCP sayakiss-mbp.lan:49808->pixel.quantserve.com:http (CLOSED)
Google 526 Sona 236u IPv4 0x9de3b88faf523701 0t0 TCP sayakiss-mbp.lan:49824->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 237u IPv4 0x9de3b88faf522e09 0t0 TCP sayakiss-mbp.lan:49825->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 238u IPv4 0x9de3b88faf522511 0t0 TCP sayakiss-mbp.lan:49826->72-165-119-59.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 239u IPv4 0x9de3b88faf53ee09 0t0 TCP sayakiss-mbp.lan:49828->72-165-119-17.dia.static.qwest.net:http (CLOSED)
Google 526 Sona 240u IPv4 0x9de3b88faf53f701 0t0 TCP sayakiss-mbp.lan:49829->72-165-119-17.dia.static.qwest.net:http (CLOSED)
QQ 640 Sona 11u IPv4 0x9de3b88f96e3fff9 0t0 TCP sayakiss-mbp.lan:49717->123.151.10.189:http (ESTABLISHED)
QQ 640 Sona 13u IPv4 0x9de3b88f96e3fff9 0t0 TCP sayakiss-mbp.lan:49717->123.151.10.189:http (ESTABLISHED)
Ma question :
- Comment trouver le processus qui écoute sur localhost ?
- Comment trouver le fichier qui est retourné par php ? (Comme vous le voyez, php retourne quelque chose contenant
It works!
donc il doit y avoir un fichier contenant ce texte...)