why did launchd open a port and what is listening?

Question

My router indicates that one TCP port (6183) has been opened by an application I run (unbeknownst to me)

Using the lsof(as answered here)lsof -iTCP:6183 -sTCP:LISTEN, I found that launchd is the culprit.

Is it possible to find out which of launchd's 'scripts' is responsible?

Answer 1

You could try hunting through the ".plist" files that launchd uses like this:

find ~/Library/LaunchAgents /Library/LaunchAgents /Library/LaunchDaemons /System/Library/LaunchAgents /System/Library/LaunchDaemons -name "*.plist" -exec grep -H 6183 "{}" \; 2>/dev/null

find ~/Library/LaunchAgents /Library/LaunchAgents /Library/LaunchDaemons /System/Library/LaunchAgents /System/Library/LaunchDaemons -name "*.plist" -exec defaults read "{}" 2>/dev/null \; | grep 6183