Charles Teton wrote: > I checked the archive and google, but can't seem to get any > definite info why Ports 1 and 6 seem to be running. <SNIP> > Raw 0 0 0.0.0.0:1 (icmp) 0.0.0.0:* 7 - > Raw 0 0 0.0.0.0:6 (tcp) 0.0.0.0:* 7 -
They're not network sockets, they are (as they say at the start of the line) 'raw' sockets. They're actually used internally to the system to allow it to process TCP and ICMP packets - pretty fundamental in normal operation ;-) There are plenty of raw socket FAQs kicking around, including a bunch of man pages on your RaQ. Try "man 7 raw" or "man 7 icmp" for starters. They're technical, but they explain it fully. Graeme -- Graeme Fowler System Administrator Host Europe Group PLC _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
