> Output from netstat -tupln:
>
> # netstat -ltupln
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address Foreign Address State
> PID/Program name
> tcp 0 0 0.0.0.0:49826 0.0.0.0:* LISTEN
> -
> tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN
> 3668/smbd
> [snip]
> tcp 0 0 ::1:631 :::* LISTEN
> 3195/cupsd
> tcp 0 0 ::1:25 :::* LISTEN
> 3698/master
> udp 0 0 0.0.0.0:32769 0.0.0.0:*
> -
> udp 0 0 0.0.0.0:68 0.0.0.0:*
> 2867/dhcpcd
> udp 0 0 0.0.0.0:69 0.0.0.0:*
> 3390/xinetd
> [snip]
>
>
> What is listening on TCP:49826 and UDP:32769 ? I checked with lsof -i -nP:
>
>
> I've tried a separate 'lsof', and I have also done a scan using rkhunter.
> Any suggestions?
>
>
> /Per Jessen, Zürich
>
>>Foli Ayivoh wrote:
>>
>> Hi,
>>
>> Try "sudo /bin/netstat -tupln" !
>
>I was logged in as root.
Then I have no clue, but maybe this helps:
http://www.seifried.org/security/ports/49000/49826.html
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
