-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dave Nebinger wrote:

>On Monday 17 October 2005 02:00 pm, Dave Nebinger wrote:
>
>>So I'm busy tracking down a tcp connection issue on my server and I see
>>that *.shell is open (not a good thing).
>>
>>So I do the 'netstat -pl' command to see who has that socket open and, low
>>and behold, it happens to be syslog-ng.
>
>
>My bad. Forgot that under tcp 544 is shell, but under udp 544 is syslog. I
>had both tcp and udp open, which is why shell port was open.
>
>Dave

Actually, the port is 514 by default, which for TCP is the rsh/rlogin
(remote shell/login) port and UDP is the syslog port.  When you do a
netstat it resolves the names for the ports based on what's in
/etc/services.  There may be a reason you would want to run syslog-ng
in TCP mode, which would show up as *.shell.  But I guess you figured
out you don't need TCP syslog.  ;-)

- --
gentux
echo "hfouvyAdpy/ofu" | perl -pe 's/(.)/chr(ord($1)-1)/ge'

gentux's gpg fingerprint ==> 34CE 2E97 40C7 EF6E EC40  9795 2D81 924A
6996 0993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDU+p/LYGSSmmWCZMRAj0rAKCObOFvK/Rjxh3eO58pM97M9h+Z3ACgwRZA
7WzdJhAPNeO0LhC2qWq69Yc=
=wZg2
-----END PGP SIGNATURE-----

-- 
gentoo-user@gentoo.org mailing list

Reply via email to