Re: 6666/tcp ??

[Mike Lee <mlee () NETCLIMB COM>]

Hi all,

thanks for all who responded..

There was a script that was created by a consultant using tcp port 6666.

When i found this port listening, i looked at various places in the system,
to look for any abnomalies; /etc/inetd.conf, netstat -an, checking inode
number for ls and ps, telneting localhost using 6666..

one place i didn't look was /etc/services and in that file, author of the
script was nicely commented.

thanks,

Mike
----- Original Message -----
From: "Hunter1" <hunter1 () nemontel net>
To: "Mike Lee" <mlee () NETCLIMB COM>; <INCIDENTS () SECURITYFOCUS COM>
Sent: Wednesday, October 25, 2000 4:15 PM
Subject: Re: 6666/tcp ??


> Are you running Powerchute? Turn it off and
> run netstat again...
>  I run across this about two months ago and once Power chute was turned
off
> the 6666/tcp
> was gone..
> regards...