[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

unknown port open by dhcpd3



Hi All,

	I saw the next line in netstat -an's output this evening on
my firewall box. It's blocked by iptables, but any reason to get nervous?

user@firebox:/home/user >netstat -an|more
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State

... normal lines

raw        0      0 0.0.0.0:1               0.0.0.0:*               7

	I don't recognise the 'raw' protocol, but following it with lsof
eventually showed dhcpd3 as owing it:

user@firebox:/home/user >sudo lsof | egrep 'COMMAND|raw'
COMMAND PID  USER FD TYPE DEVICE SIZE NODE NAME
dhcpd3  1357 root 4u raw              2908 00000000:0001->00000000:0000 st=07

Google sugests a 'kernel internal socket', purpose unknown.

Anybody know more?

Sincerely,

Jan.



Reply to: