Re: [gentoo-user] Eeek: many open ports

2010-12-14 Thread Gary Golden
No, really.
Run netstat -tlnp as root and paste output.

Gary Golden

On 12/14/2010 02:08 AM, Kevin O'Gorman wrote:
 Eeek!!
 
 Just fooling around with some software on my laptop, I found that my
 Gentoo desktop has an even dozen open inet ports with something
 listening to them, in addition to the ones I would expect (25, 80 and so
 on).
 They are all in the range 32768-6.
 
 Netstat agrees that they're open but does not disclose which process is
 listening.
 
 Does anybody know how to find this out?
 
 ++ kevin
 
 -- 
 Kevin O'Gorman, PhD
 



[gentoo-user] Eeek: many open ports

2010-12-13 Thread Kevin O'Gorman
Eeek!!

Just fooling around with some software on my laptop, I found that my Gentoo
desktop has an even dozen open inet ports with something listening to them,
in addition to the ones I would expect (25, 80 and so on).
They are all in the range 32768-6.

Netstat agrees that they're open but does not disclose which process is
listening.

Does anybody know how to find this out?

++ kevin

-- 
Kevin O'Gorman, PhD


Re: [gentoo-user] Eeek: many open ports

2010-12-13 Thread pk
On 2010-12-13 22:08, Kevin O'Gorman wrote:

 Netstat agrees that they're open but does not disclose which process is
 listening.
 
 Does anybody know how to find this out?

netstat only lists listening processes when you're root...

Best regards

Peter K



Re: [gentoo-user] Eeek: many open ports

2010-12-13 Thread Volker Armin Hemmann
On Monday 13 December 2010 13:08:18 Kevin O'Gorman wrote:
 Eeek!!
 
 Just fooling around with some software on my laptop, I found that my Gentoo
 desktop has an even dozen open inet ports with something listening to them,
 in addition to the ones I would expect (25, 80 and so on).
 They are all in the range 32768-6.
 
 Netstat agrees that they're open but does not disclose which process is
 listening.
 
 Does anybody know how to find this out?
 
 ++ kevin

let someone from the outside scan your box. That way you get much more 
reliable results.

Like this:
http://www.heise.de/security/dienste/Netzwerkcheck-2114.html

http://www.heise.de/security/dienste/portscan/test/go.shtml?scanart=1






Re: [gentoo-user] Eeek: many open ports

2010-12-13 Thread Kevin O'Gorman
On Mon, Dec 13, 2010 at 1:18 PM, pk pete...@coolmail.se wrote:

 On 2010-12-13 22:08, Kevin O'Gorman wrote:

  Netstat agrees that they're open but does not disclose which process is
  listening.
 
  Does anybody know how to find this out?

 netstat only lists listening processes when you're root...

 Not for me, it doesn't.  It lists processes for unix-domain sockets whether
I'm root or not, but does not show them for inet-domain at all.

I'm using netstat -l or netstat -ln.  Is there some other option I need?
 I didn't see one.

++ kevin


-- 
Kevin O'Gorman, PhD


Re: [gentoo-user] Eeek: many open ports

2010-12-13 Thread Bill Longman
On 12/13/2010 02:02 PM, Kevin O'Gorman wrote:
 On Mon, Dec 13, 2010 at 1:18 PM, pk pete...@coolmail.se
 mailto:pete...@coolmail.se wrote:
 
 On 2010-12-13 22:08, Kevin O'Gorman wrote:
 
  Netstat agrees that they're open but does not disclose which
 process is
  listening.
 
  Does anybody know how to find this out?
 
 netstat only lists listening processes when you're root...
 
 Not for me, it doesn't.  It lists processes for unix-domain sockets
 whether I'm root or not, but does not show them for inet-domain at all.
 
 I'm using netstat -l or netstat -ln.  Is there some other option I
 need?  I didn't see one.

You need -p for process.



Re: [gentoo-user] Eeek: many open ports

2010-12-13 Thread kashani

On 12/13/2010 2:22 PM, Bill Longman wrote:

On 12/13/2010 02:02 PM, Kevin O'Gorman wrote:

On Mon, Dec 13, 2010 at 1:18 PM, pkpete...@coolmail.se
mailto:pete...@coolmail.se  wrote:

 On 2010-12-13 22:08, Kevin O'Gorman wrote:

   Netstat agrees that they're open but does not disclose which
 process is
   listening.
 
   Does anybody know how to find this out?

 netstat only lists listening processes when you're root...

Not for me, it doesn't.  It lists processes for unix-domain sockets
whether I'm root or not, but does not show them for inet-domain at all.

I'm using netstat -l or netstat -ln.  Is there some other option I
need?  I didn't see one.


You need -p for process.



What Bill said. You'll probably want to try sudo netstat -lnp and sudo 
netstat -lnpt which just shows TCP ports.


kashani



Re: [gentoo-user] Eeek: many open ports

2010-12-13 Thread Marius Vaitiekunas
Hi,
Could it be torrents..?

On Mon, Dec 13, 2010 at 11:08 PM, Kevin O'Gorman kogor...@gmail.com wrote:

 Eeek!!

 Just fooling around with some software on my laptop, I found that my Gentoo
 desktop has an even dozen open inet ports with something listening to them,
 in addition to the ones I would expect (25, 80 and so on).
 They are all in the range 32768-6.

 Netstat agrees that they're open but does not disclose which process is
 listening.

 Does anybody know how to find this out?

 ++ kevin

 --
 Kevin O'Gorman, PhD




-- 
mv