Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-29 Thread Juha Jäykkä
how, can i see the tcp port 4350 that states to be opened useing nmap There is _the_ official document of registered ports at http://www.iana.org/assignments/port-numbers and it claims 4350 is Net Device - what ever that means. The entry is created by microsoft so we may assume it is some

hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-28 Thread killah
how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? doing ps with many different parameters doesn't saw me any unusual. maybe guys you can help me. Also after connecting with netcat to that port, seems closed and when i am

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-28 Thread Ken Seefried
killah writes: how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? You can use the lsof command to see what processes is bound to a given port. As I recall, it would be lsof -i TCP:4350 and lsof -i UDP:4350, but don't

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-28 Thread Robert Mognet
Hello, On Tue, May 29, 2001 at 03:05:52AM +0300, killah wrote: how, can i see the tcp port 4350 that states to be opened useing nmap As root, you can do: fuser -v -n tcp 4350 and: lsof -i tcp:4350 The lsof command, if it finds anything, will return a PID as part of it's

hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-28 Thread killah
how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? doing ps with many different parameters doesn't saw me any unusual. maybe guys you can help me. Also after connecting with netcat to that port, seems closed and when i am

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-28 Thread Ken Seefried
killah writes: how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? You can use the lsof command to see what processes is bound to a given port. As I recall, it would be lsof -i TCP:4350 and lsof -i UDP:4350, but don't

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-28 Thread Robert Mognet
Hello, On Tue, May 29, 2001 at 03:05:52AM +0300, killah wrote: how, can i see the tcp port 4350 that states to be opened useing nmap As root, you can do: fuser -v -n tcp 4350 and: lsof -i tcp:4350 The lsof command, if it finds anything, will return a PID as part of it's