Re: is it rational to close the 139 port
On Sun, Jul 22, 2012 at 4:44 PM, Joe <joe@jretrading.com> wrote:
> On Sun, 22 Jul 2012 16:37:16 +0800
> lina <lina.lastname@gmail.com> wrote:
>
>>
>> P.S I also found
>>
>> tcp 0 0 127.0.0.1:631 0.0.0.0:*
>> LISTEN tcp 0 0 127.0.0.1:25
>> 0.0.0.0:* LISTEN tcp 0 0
>> 0.0.0.0:538 0.0.0.0:* LISTEN
>>
>>
>> 631 is for network printer, I am confused why it need LISTEN here, I
>> only print once or twice each month.
>>
>> What 538 is for? I googled, but I don't have gdomap
>> installed, strange?
>>
>
> Run netstat -tupan as root, and it will also show you the processes
> associated with the ports. The -p does that, and as root, it will show
> all processes, not just yours.
# netstat -tupan
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address
State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:*
LISTEN 5466/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:*
LISTEN 1945/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:*
LISTEN 2306/exim4
tcp 0 0 0.0.0.0:538 0.0.0.0:*
LISTEN 2366/gdomap
tcp 0 0 172.21.48.67:60259 208.93.141.90:80
TIME_WAIT -
tcp 0 0 172.21.48.67:55221 155.69.57.55:22
ESTABLISHED 5507/ssh
tcp 0 0 172.21.48.67:47085 74.125.235.54:443
TIME_WAIT -
tcp6 0 0 :::143 :::*
LISTEN 1866/couriertcpd
tcp6 0 0 :::80 :::*
LISTEN 1719/apache2
tcp6 0 0 :::22 :::*
LISTEN 5466/sshd
tcp6 0 0 ::1:631 :::*
LISTEN 1945/cupsd
udp 0 0 0.0.0.0:19777 0.0.0.0:*
2695/dhclient
udp 0 0 0.0.0.0:68 0.0.0.0:*
5405/dhclient
udp 0 0 0.0.0.0:68 0.0.0.0:*
2826/dhclient
udp 0 0 0.0.0.0:68 0.0.0.0:*
2695/dhclient
udp 0 0 172.21.48.67:123 0.0.0.0:*
2905/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:*
2905/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:*
2905/ntpd
udp 0 0 0.0.0.0:538 0.0.0.0:*
2366/gdomap
udp 0 0 0.0.0.0:53856 0.0.0.0:*
2826/dhclient
udp 0 0 0.0.0.0:54035 0.0.0.0:*
5405/dhclient
udp6 0 0 :::20444 :::*
5405/dhclient
udp6 0 0 :::28780 :::*
2695/dhclient
udp6 0 0 :::49268 :::*
2826/dhclient
udp6 0 0 fe80::ca2a:14ff:fe0:123 :::*
2905/ntpd
udp6 0 0 ::1:123 :::*
2905/ntpd
udp6 0 0 :::123 :::*
2905/ntpd
root@debian:/etc/iptables# dpkg --get-selections | grep gdomap
no gdomap installed,
# dpkg -L gdomap
Package `gdomap' is not installed.
Use dpkg --info (= dpkg-deb --info) to examine archive files,
and dpkg --contents (= dpkg-deb --contents) to list their contents.
But # which gdomap
/usr/bin/gdomap
Thanks,
P.S if you notice something abnormal form the netstat, please feel
free to let me know.
Best regards,
>
> --
> Joe
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: [🔎] 20120722094412.3cdc0f61@jretrading.com">http://lists.debian.org/[🔎] 20120722094412.3cdc0f61@jretrading.com
>
Reply to: