Security Basics mailing list archives
Re: Unknow process listening on high port
From: Bryan Andrews <bryanandrews () gmail com>
Date: Tue, 25 Oct 2005 10:37:36 -0700
Try using lsof to learn more. On 10/25/05, Shawn Badger <sbadger () cskauto com> wrote:
I have been auditing a couple of my Suse enterprise 9 servers and have come across a different port on each of them that doesn't show up when I use lsof, but show up in nmap and netstat. The ports are 39207/tcp on one server and 49751/tcp on the other. When I do lsof -i -n and grep it for the proper port I get no output. When I do netstat -ap I get an output, but the pid shows up as -. I haven't seen a process show up as a - before and don't where to start looking for that process. Here is the output of the netstat: server1:~# netstat -ap |grep 39207 tcp 0 0 *:39207 *:* LISTEN - I get the same results on the other server as well Any ideas would be appreciated.
Current thread:
- Unknow process listening on high port Shawn Badger (Oct 25)
- Re: Unknow process listening on high port David (Oct 26)
- Re: Unknow process listening on high port Bryan Andrews (Oct 26)
- Message not available
- Re: Unknow process listening on high port Shawn Badger (Oct 26)
- Re: Unknow process listening on high port Justin (Oct 31)
- Re: Unknow process listening on high port Shawn Badger (Oct 31)
- Re: Unknow process listening on high port Adam (Oct 31)
- Re: Unknow process listening on high port Shawn Badger (Oct 26)
- <Possible follow-ups>
- Re: Unknow process listening on high port Steve.Cummings (Oct 26)
- Re: Unknow process listening on high port Shawn Badger (Oct 27)