who owns the ports?

["Matthias G. Imhof" <mgi@VT.EDU>]

Performing strobe or nmap on my system, I get, e.g., the following list:

79/tcp     open        finger                  
119/tcp    open        nntp                    
143/tcp    open        imap2                   
540/tcp    open        uucp                    
6667/tcp   open        irc                     
12345/tcp  open        NetBus                  
12346/tcp  open        NetBus                  
31337/tcp  open        Elite                   

However, lsof -i tcp:79 yields nothing. Similarly with the others.
In addition, there should be no irc running, finger is commented from the
inetd.conf, and so on.

Why do these ports respond to strobe or nmap? Which process controlls them?

Matthias

-- 
**************************************************************************
* Matthias G.Imhof, Ph.D.                          phone: (540) 231 6004 *
* Derring Hall 4044                                fax:   (540) 231 3386 *
* Virginia Tech                                        email: mgi@vt.edu *
* Blacksburg, VA 24061-0420             http://www.geol.vt.edu/profs/mgi *
* There is no dark side of the moon really. Matter of fact it's all dark *
**************************************************************************