Re: Unknown open ports
On Tue, Jun 06, 2000 at 12:22:33AM +0200, Ron Rademaker wrote:
> I've just run a portscan to my computer that is connected to the internet
> (permanently) and there were a few ports open of which I don't know what
> they are for (all ports under 1024) and neither did the portscanner, these
> are the ports: 686 698 708
> If I use telnet to go to one of those ports, the connection isn't closed
> by the remote host (only after I've typed a few things and pressed enter a
> few times).
>
> Anybody got any ideas on what these ports are for?
Not off the top of my head. The most convienent way I've found to
determine is lsof (apt-get install lsof-2.2 or lsof-2.0.36 depending on
kernel).
Just do a "lsof | grep TCP" as root and you'll get a list with names
pids, and open ports down the right. It's nice.
Someone else suggested it was rpc, but if you are actually
neo.rademaker.dhs.org (That's what your headers say), that's not it.
Oh well.
hope this helps
greg
Reply to: