What could be on udp:48152
From: Dmitry S. Makovey (dmitry_at_athabascau.ca)
Date: 11/13/03
- Previous message: Stijn Hoop: "Re: Apache leaks sensitive info in PHP phpinfo() calls"
- Next in thread: James Raftery: "Re: What could be on udp:48152"
- Reply: James Raftery: "Re: What could be on udp:48152"
- Reply: Mike Silbersack: "Re: What could be on udp:48152"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 13 Nov 2003 11:12:10 -0700 To: freebsd-security@freebsd.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi, I'm running stock FreeBSD with services running: samba (connections
allowed only from local network), lpd (same), bind (all interfaces), apache
(all), zope (local)
This machine is home gateway/http/printserver.
Recently some strange things happened as my printer all of sudden started to
print stuff when nobody prints... luckily (or unluckily) it ran out of ink so
I can't tell what's printed. Checked programs running, ports opened and found
one unidentified:
udp4 0 0 *.49152 *.*
dimon@gateway ~ > sockstat | grep 49152
bind named 270 4 udp4 *:49152 *:*
Now', is there any reason for bind to use this port?
Googling for that subject didn't bring any results other than usualy this port
is first available for dynamic ports. Which doesn't make sence to me.
System:
FreeBSD 5.1
- --
Dmitry Makovey
Web Systems Administrator
Athabasca University
(780) 675-6245
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
iD8DBQE/s8mAyDrVuGfS98QRAlo6AJ9Miz8bbYjkldiTvSGOd+LfwY/3CACcCQAj
eNMb97scSLfQDvoHE6nx+L8=
=p4RL
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
- Previous message: Stijn Hoop: "Re: Apache leaks sensitive info in PHP phpinfo() calls"
- Next in thread: James Raftery: "Re: What could be on udp:48152"
- Reply: James Raftery: "Re: What could be on udp:48152"
- Reply: Mike Silbersack: "Re: What could be on udp:48152"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|