[EMAIL PROTECTED] ~]# sockstat -l USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS www httpd 564 3 tcp46 *:80 *:* www httpd 564 4 tcp4 *:* *:* www httpd 563 3 tcp46 *:80 *:* www httpd 563 4 tcp4 *:* *:* www httpd 562 3 tcp46 *:80 *:* www httpd 562 4 tcp4 *:* *:* www httpd 561 3 tcp46 *:80 *:* www httpd 561 4 tcp4 *:* *:* www httpd 560 3 tcp46 *:80 *:* www httpd 560 4 tcp4 *:* *:* root authdaemon 559 5 stream /usr/local/var/spool/authdaemon/socket.tmp root authdaemon 558 5 stream /usr/local/var/spool/authdaemon/socket.tmp root authdaemon 557 5 stream /usr/local/var/spool/authdaemon/socket.tmp root authdaemon 556 5 stream /usr/local/var/spool/authdaemon/socket.tmp root authdaemon 555 5 stream /usr/local/var/spool/authdaemon/socket.tmp root couriertcp 507 3 tcp6 *:143 *:* root couriertcp 507 5 tcp4 *:143 *:* root authdaemon 499 5 stream /usr/local/var/spool/authdaemon/socket.tmp root sshd 480 3 tcp6 *:22 *:* root sshd 480 4 tcp4 *:22 *:* root httpd 461 3 tcp46 *:80 *:* root httpd 461 4 tcp4 *:* *:* mysql mysqld 453 10 tcp4 *:3306 *:* mysql mysqld 453 12 stream /tmp/mysql.sock root tcpserver 419 3 tcp4 *:110 *:* root syslogd 289 4 dgram /var/run/log root syslogd 289 5 dgram /var/run/logpriv root syslogd 289 6 dgram /var/run/log root syslogd 289 7 dgram /var/named/var/run/log root syslogd 289 8 udp6 *:514 *:* root syslogd 289 9 udp4 *:514 *:* root devd 245 4 stream /var/run/devd.pipe [EMAIL PROTECTED] ~]#
[EMAIL PROTECTED] ~]# pkg_info | grep svscan [EMAIL PROTECTED] ~]# [EMAIL PROTECTED] ~]# tail -n 100 /var/log/qmail/qmail-smtpd/run #!/bin/sh PATH=/var/qmail/bin:/usr/local/bin:/usr/bin:/bin export PATH exec setuidgid qmaill multilog t s100000 n20 /var/log/qmail/qmail-smtpd 2>&1 [EMAIL PROTECTED] ~]# [EMAIL PROTECTED] ~]# ls -l /var/qmail/control/ total 18 -rw-r--r-- 1 root qmail 3 May 2 01:00 concurrencyincoming -rw-r--r-- 1 root qmail 4 May 2 01:00 concurrencyremote -rw-r--r-- 1 root qmail 10 May 2 01:00 defaultdelivery -rw-r--r-- 1 root qmail 12 May 2 00:47 defaultdomain -rw-r--r-- 1 root qmail 36 May 2 02:33 locals -rw------- 1 root qmail 0 May 2 01:13 locals.lock -rw-r--r-- 1 root qmail 36 May 2 02:33 me -rw-r--r-- 1 root qmail 12 May 2 00:47 plusdomain -rw-r--r-- 1 root qmail 48 May 2 02:16 rcpthosts -rw------- 1 root qmail 0 May 2 01:13 rcpthosts.lock -rw-r--r-- 1 root qmail 44 May 2 02:19 virtualdomains -rw------- 1 root qmail 0 May 2 01:13 virtualdomains.lock [EMAIL PROTECTED] ~]# [EMAIL PROTECTED] ~]# find / -iname tcp.smt* /etc/tcp.smtp /etc/tcp.smtp.cdb [EMAIL PROTECTED] ~]# [EMAIL PROTECTED] ~]# tail /var/log/messages May 2 19:44:33 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:58054 May 2 19:44:37 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:59010 May 2 19:44:37 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:62825 May 2 19:44:40 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:52923 May 2 19:44:40 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:52015 May 2 19:44:40 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:63459 May 2 19:44:40 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:59244 May 2 19:48:36 matrix kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:58177 flags:0x02 May 2 19:50:17 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:49544 May 2 19:50:17 matrix kernel: Connection attempt to UDP 10.0.0.111:53 from 10.0.0.111:59564 [EMAIL PROTECTED] ~]#
