[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Edlug Archive Mar 2004 ]

Re: [edlug] open ports concern



On Sunday 28 Mar 2004 10:43 am, you wrote:
> El dom, 28-03-2004 a las 11:12, Paul McClung escribió:
> > HI wander if anyone can shed any light on this a recent diff check on my
> > system has shown up 2 new ports opened these are 6389 and 2071 this has
> > me a bit worried any sugestion as to what might be using these ports
>
> netstat -putan | grep LISTEN
>
> you need root to do that ;-)

Here is the output of netstat -putan | grep LISTEN

[root@www root]# netstat -putan | grep LISTEN
tcp        0      0 0.0.0.0:20000           0.0.0.0:*               LISTE
N      2921/perl
tcp        0      0 127.0.0.1:32768         0.0.0.0:*               LISTE
N      2197/xinetd
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTE
N      2197/xinetd
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTE                                      
N      2563/mysqld
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTE                                      
N      2197/xinetd
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTE                                      
N      2197/xinetd
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTE                                      
N      1083/portmap
tcp        0      0 0.0.0.0:6000            0.0.0.0:*               LISTE                                      
N      6389/X
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTE                                      
N      2755/httpd2
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTE                                      
N      2569/perl
tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTE                                      
N      2197/xinetd
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTE                                      
N      2109/sshd
tcp        0      0 0.0.0.0:3001            0.0.0.0:*               LISTE                                      
N      2405/nessusd
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTE                                      
N      2373/master
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTE                                      
N      2755/httpd2
[root@www root]#

-
----------------------------------------------------------------------
You can find the EdLUG mailing list FAQ list at:
http://www.edlug.org.uk/list_faq.html



This archive is kept by wibble@morpheux.org.DONTSPAMME
homepage