Try this..
nmap -p5222-5223 localhost
Starting Nmap 4.11 (
Nmap - Free Security Scanner For Network Exploration & Security Audits. ) at 2009-01-14 11:40 PST
Interesting ports on localhost.localdomain (127.0.0.1):
PORT STATE SERVICE
5222/tcp closed unknown
5223/tcp open unknown
netstat -an | grep 52
tcp 0 0 192.168.9.14:49527 192.168.9.14:389 ESTABLISHED
tcp 0 0 192.168.9.14:389 192.168.9.14:49527 ESTABLISHED
tcp 0 0 :::5223 :::* LISTEN
tcp 0 0 :::5269 :::* LISTEN
tcp 24 0 ::ffff:127.0.0.1:52112 ::ffff:127.0.0.1:7071 CLOSE_WAIT
tcp 0 0 ::ffff:192.168.9.14:5223 ::ffff:192.168.9.106:52523 ESTABLISHED
What log should I be looking in?