[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Dumb Memory Question



On Sat, 12 Jan 2002, William Moore wrote:

> now my question is can someone identify what these ports are ?

etc/services will list the servies ;P

113 - ident, makes sendmail happy, leave it
513,514 depend, but you probably don't want them exposed
98 is an unregistered port, it should not be open!

anything above 1023 is indeterminate, those are the random connection
ports for clients, so you need to use lsof or fuser to see what program
owns them...

port 10000 is very commonly seen open after rootkit install (adore+lrk)

[...]

If your netstat is new enough, netstat -p will list the programs owning
the ports...

gsh