Re: Strange opened ports.
On Mon, Jun 03, 2002 at 10:57:46PM +0200, Jacques Lav!gnotte wrote:
> On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> > Are you sure they are open and nmap isn't just returning a false
> > positive?
> >
> > Try a #netstat -vatn on the local server and see if those ports really
> > are open.
>
> news:~# netstat -vatn
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address Foreign Address State
> tcp 0 0 195.6.210.99:22 80.9.25.228:654 ESTABLISHED
> tcp 0 53 195.6.210.99:22 193.250.33.70:660 FIN_WAIT1
> tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
>
>
> Can anybody try this from elsewhere :
>
> # nmap -sU -p 1996-1997 news.pcl.fr
nnorman@argonath:~$ date
Mon Jun 3 21:17:53 CDT 2002
nnorman@argonath:~$ sudo nmap -sU -p 1996-1997 news.pcl.fr
Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ )
All 2 scanned ports on news.pcl.fr (195.6.210.99) are: closed
Nmap run completed -- 1 IP address (1 host up) scanned in 4 seconds
--
Nathan Norman - Micromuse Ltd. mailto:nnorman@micromuse.com
Gil-galad was an Elven-king. | The Fellowship
Of him the harpers sadly sing: | of
the last whose realm was fair and free | the Ring
between the Mountains and the Sea. | J.R.R. Tolkien
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: