Sinabi ni Orlando Andico noong Thu, Jun 21, 2001 at 02:18:11PM +0800 GMT:
>
> ..
> 32777/tcp open sometimes-rpc17
> 32779/tcp open sometimes-rpc21
> ..
>
> what are these ports? please God don't tell me I've been rootkitted
> AGAIN. I was running an old and vulnerable ProFTPd for a while.
>
>
If this is a solaris box, then it may be rpc.walld. Did you try the
usual "netstat -anp"
HTH,
G-3
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
