[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: who owns the ports?



Matthias,

netstat -atp | less

Regards,

Alex.

---
PGP/GPG Fingerprint:
  EFD1 AC6C 7ED5 E453 C367  AC7A B474 16E0 758D 7ED9

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS/CM>CC/IT d- s:+ a16 C++(++++)>$ UL++++>$ P--- L++>++$ E+ W+(-) N+ o? K? w---() 
!O !M !V PS+(++)>+ PE-(--) Y+>+ PGP t+>++ !5 X-- R>++ tv(+) b+(++) DI(+) D++ 
G>+++ e--> h! !r y>+++ 
------END GEEK CODE BLOCK------

On Wed, 7 Feb 2001, Matthias G. Imhof wrote:

> Performing strobe or nmap on my system, I get, e.g., the following list:
> 
> 79/tcp     open        finger                  
> 119/tcp    open        nntp                    
> 143/tcp    open        imap2                   
> 540/tcp    open        uucp                    
> 6667/tcp   open        irc                     
> 12345/tcp  open        NetBus                  
> 12346/tcp  open        NetBus                  
> 31337/tcp  open        Elite                   
> 
> However, lsof -i tcp:79 yields nothing. Similarly with the others.
> In addition, there should be no irc running, finger is commented from the
> inetd.conf, and so on.
> 
> Why do these ports respond to strobe or nmap? Which process controlls them?
> 
> Matthias
> 
> -- 
> **************************************************************************
> * Matthias G.Imhof, Ph.D.                          phone: (540) 231 6004 *
> * Derring Hall 4044                                fax:   (540) 231 3386 *
> * Virginia Tech                                        email: mgi@vt.edu *
> * Blacksburg, VA 24061-0420             http://www.geol.vt.edu/profs/mgi *
> * There is no dark side of the moon really. Matter of fact it's all dark *
> **************************************************************************
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 



Reply to: