> I don't believe that Gerardo's machine has been compromised because a raw
> socket is listening, rather it is a normal listening port in a Linux
> machine. If I understand it correctly, a raw socket listening on "port" 1
> is waiting for ICMP packets (ICMP has been assigned protocol number 1)
>
> Somebody correct me if I am wrong 'cause my Linux systems also show
> listening raw sockets... ;-)
Having done a fresh debian slink install, I can tell you that it's
normal. The machine hasn't been connected to the net yet, but it's
listening to that port with raw.
Anybody know how to findout which process has what ports open under
Linux or OpenBSD? Or for that matter any other OS.
--
| Bryan Andersen | [EMAIL PROTECTED] | http://softail.visi.com |
| Buzzwords are like annoying little flies that deserve to be swatted. |
| -Bryan Andersen |
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
