Windows:

C:/Users/ewanbao>netstat -aon|findstr "123"
? TCP??? 127.0.0.1:55123??????? 0.0.0.0:0?????????????????LISTENING???????? 5092
? TCP??? 127.0.0.1:55123??????? 127.0.0.1:55124??????? ESTABLISHED???? 5092
? TCP??? 127.0.0.1:55124??????? 127.0.0.1:55123??????? ESTABLISHED???? 5092
? UDP??? 0.0.0.0:123?????????????? *:*?????????????????? ??????????????????????????? 1416
? UDP??? [::]:123??????????????????? *:*?????????????????????????????????????????????? 1416

[注]:执行netstat -aon|findstr "123"以后，就可以看到5092进程中TCP打开123端口，1416进程打开UDP123端口

?

C:/Users/ewanbao>tasklist|findstr "1416"
svchost.exe?????????????????? 1416 Services?????????????????? 0???? 13,540 K

[注]：执行tasklist|findstr "1416"后就可以看到是svchost.exe在UDP打开123端口

?

Linux:

cba001:~ # lsof -i:5300
COMMAND?? PID USER?? FD?? TYPE?? DEVICE SIZE NODE NAME
named?? 26751 root?? 20u? IPv4 64750499?????? TCP localhost:hacl-hb (LISTEN)
named?? 26751 root?? 21u? IPv4 64750501?????? TCP cba001.eapac:hacl-hb (LISTEN)
named?? 26751 root?? 22u? IPv4 64750503?????? TCP 192.168.0.10:hacl-hb (LISTEN)
named?? 26751 root? 512u? IPv4 64750498?????? UDP localhost:hacl-hb
named?? 26751 root? 513u? IPv4 64750500?????? UDP cba001.eapac:hacl-hb
named?? 26751 root? 514u? IPv4 64750502?????? UDP 192.168.0.10:hacl-hb

[注]:执行lsof -i:5300以后就可以看到26751进程在TCP和UDP上都打开了5300端口.

?

cba001:~ # ps -ef|grep 26751
root???? 10118 26915? 0 12:59 pts/8??? 00:00:00 grep 26751
root???? 26751???? 1? 0 Jul06 ???????? 00:02:06 /opt/ipworks/IPWdns/usr/bin/named

[注]:执行ps -ef|grep 26751以后就可以看到是named进程打开了5300端口