I am running a box that provides lots of different services to the office:
sappho ~ # nmap localhost PORT STATE SERVICE 13/tcp open daytime 21/tcp open ftp 22/tcp open ssh 37/tcp open time 70/tcp open gopher 80/tcp open http 110/tcp open pop3 111/tcp open rpcbind 119/tcp open nntp 631/tcp open ipp 811/tcp open unknown 1433/tcp open ms-sql-s 2049/tcp open nfs 3306/tcp open mysql 6667/tcp open irc 32770/tcp open sometimes-rpc3
But I don't remember I opened any service on port 32770. This one is strange. So I did netstat. The result is surprising to me, netstat failed to detect the program name listening on 32770.
What's your suggestion?
sappho ~ # netstat -tupan Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 1896/rpc.statd tcp 0 0 0.0.0.0:2049 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:32770 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:37 0.0.0.0:* LISTEN 2083/xinetd tcp 0 0 0.0.0.0:5222 0.0.0.0:* LISTEN 3041/jabberd tcp 0 0 0.0.0.0:70 0.0.0.0:* LISTEN 1728/gofish tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 1392/mysqld tcp 0 0 0.0.0.0:6667 0.0.0.0:* LISTEN 1996/stunnel tcp 0 0 0.0.0.0:811 0.0.0.0:* LISTEN 1906/rpc.mountd tcp 0 0 0.0.0.0:13 0.0.0.0:* LISTEN 2083/xinetd tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 2083/xinetd tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1883/portmap tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 4023/apache2 tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 4696/proftpd: (acce tcp 0 0 0.0.0.0:5269 0.0.0.0:* LISTEN 3041/jabberd tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1425/sshd tcp 0 0 0.0.0.0:119 0.0.0.0:* LISTEN 2083/xinetd tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 1483/cupsd tcp 0 0 127.0.0.1:1433 0.0.0.0:* LISTEN 3041/jabberd tcp 0 0 192.168.0.250:22 192.168.0.151:33955 ESTABLISHED 2861/sshd: [EMAIL PROTECTED] tcp 0 0 192.168.0.250:22 192.168.0.151:33923 ESTABLISHED 2527/s0 tcp 0 0 192.168.0.250:22 192.168.0.151:34429 ESTABLISHED 11725/s1 tcp 0 0 192.168.0.250:5222 192.168.0.151:33962 ESTABLISHED 3041/jabberd tcp 0 0 192.168.0.250:5222 192.168.0.144:34677 ESTABLISHED 3041/jabberd tcp 0 0 127.0.0.1:1433 127.0.0.1:37496 ESTABLISHED 3041/jabberd tcp 0 0 127.0.0.1:37496 127.0.0.1:1433 ESTABLISHED 3091/jabberd tcp 0 0 192.168.0.250:38136 208.245.212.67:5269 ESTABLISHED 3041/jabberd tcp 0 0 192.168.0.250:6667 192.168.0.151:34428 ESTABLISHED 1996/stunnel tcp 0 0 192.168.0.250:38911 207.46.107.59:1863 ESTABLISHED 3091/jabberd tcp 0 0 192.168.0.250:38901 207.46.107.176:1863 ESTABLISHED 3091/jabberd tcp 0 0 192.168.0.250:38939 68.36.203.176:7779 ESTABLISHED 1996/stunnel tcp 0 0 192.168.0.250:38963 207.46.108.93:1863 ESTABLISHED 3091/jabberd udp 0 0 0.0.0.0:32768 0.0.0.0:* 1896/rpc.statd udp 0 0 0.0.0.0:2049 0.0.0.0:* - udp 0 0 0.0.0.0:32770 0.0.0.0:* - udp 0 0 0.0.0.0:13 0.0.0.0:* 2083/xinetd udp 0 0 0.0.0.0:800 0.0.0.0:* 1896/rpc.statd udp 0 0 0.0.0.0:37 0.0.0.0:* 2083/xinetd udp 0 0 0.0.0.0:808 0.0.0.0:* 1906/rpc.mountd udp 0 0 0.0.0.0:68 0.0.0.0:* 1237/dhcpcd udp 0 0 0.0.0.0:111 0.0.0.0:* 1883/portmap udp 0 0 0.0.0.0:631 0.0.0.0:* 1483/cupsd
-- [email protected] mailing list
