On 14 Jun 2001 10:27 AM or thereabouts, Cam Ellison wrote:
> [EMAIL PROTECTED] wrote:
> As you said, it is weird.  What I have here is my linux box with a Samba
> server for my kids' machine, which my wife also uses, and netatalk for
> the Mac Powerbook I use for work.  Yes, I have a cable modem connection
> for which I use dhcp.  I have ssh set up, but have not been able to get
> the Mac set up in a way that allows me to connect, so I haven't.  I have
> proftpd running, but there's only one way in -- through my username and
> password.  I get regular hits on that, too, though only recently have I
> bothered to sic anyone one them.
> 
> > 
> > These are service (port) names.  AFAIK netstat doesn't tell you process
> > names.

Yes, those are service names...  but netstat *can* tell you the process
associated with a given connection:

# netstat -ap --inet
Proto Recv-Q Send-Q Local Address           Foreign Address         State
PID/Program name
tcp        0      0 *:www                   *:*     LISTEN  14158/httpd
tcp        0      0 127.0.0.1:domain        *:*     LISTEN  1153/named
tcp        0      0 *:ssh                   *:*     LISTEN  9347/sshd
tcp        0      0 *:smtp                  *:*     LISTEN  24993/inetd

Very useful. (and easier to read than lsof, IMHO)

> > > ntalk
> > > talk
> > > discard
> > > sunrpc

> I think I will leave sunrpc, but I have taken talk and talkd out.  I can
> find no reference to discard.  It is not in the locate db, and is not a
> Debian package.  Odd.  Does it ring any bells with you?

$ cat /etc/services | grep discard
discard         9/tcp           sink null
discard         9/udp           sink null

discard is a service left over from the old days, much like a network
/dev/null.  Anything sent to it disappears.  It runs out of inetd usually,
so you can (and probably should) just comment it out of /etc/inetd.conf

Also, do you export NFS shares from this machine?  If you do not, I
*strongly* reccomend turning off all of your RPC services. Those daemons are
just trouble if you don't really need them.  (Under debian, these services
are controlled by the 'nfs-common', 'nfs-user-server', and 'portmap'
entries in /etc/init.d/)

--Matthew
[EMAIL PROTECTED]

--
  "There are a thousand forms of subversion, but few can equal the 
   convenience and immediacy of a cream pie"
     -- Noel Godin

Reply via email to