Re: Port 32768/tcp

From: David López Moreno (dave@dec.usc.es)
Date: 08/29/01 

Message-ID: <3B8CD0AE.AB634EF7@dec.usc.es>
Date: Wed, 29 Aug 2001 13:23:26 +0200
From: David López Moreno <dave@dec.usc.es>
To: focus-linux@securityfocus.com
Subject: Re: Port 32768/tcp

Kent Crispin wrote:

> > 475/rpc.statd
>
> ...but is that the *real* rpc.statd? :-)
>

    Hum, good point, let's see ...

[root@myhost /root]# /usr/sbin/tripwire --check -v -c /etc/tripwire/tw.cfg
 /sbin/rpc.statd
< snip >
Integrity checking objects specified on command line...
Checking: /sbin/rpc.statd
< snip >

  Rule Name Severity Level Added Removed Modified
  --------- ----------- ----- ------ -------
  System Administration Programs 100 0 0
0
  (/sbin/rpc.statd)

Total objects scanned: 1
Total violations found: 0

< snip >
Integrity check complete.

    Tripwire says this file hasn't been corrupted since I installed it, and ..

[root@myhost 475]# pwd
/proc/475
[root@myhost 475]# ls -l
<snip>
lrwxrwxrwx 1 root root 0 Aug 29 12:14 exe -> /sbin/rpc.statd
<snip>

    This means that the process running with PID 475 listening on port
32768/tcp and named rpc.statd is the same that Tripwire has checked
(useful information about the /proc filesystem: man proc)

 :-)

Cheers,

    Dave

P.S: On Tripwire,
http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/tripwireASR.html

Relevant Pages

  • Re: ODB (Cache?) vs ORM
    ... This is common and accepted database knowledge. ... > other way is error-prone, thus virtually guaranteed to break integrity, producing ... > is multiple orders of magnitude more powerful than procedural optimization. ...
    (comp.lang.java.databases)
  • Re: Database advice
    ... and Windows has both integrated stuff like FileMaker ... good programmers are very rarely good UI ... I'd be more concerned about data integrity issues, ...
    (comp.sys.mac.advocacy)
  • Re: This proves Jan is obsessed with me....
    ... Oh, that's right, she's your buddy. ... [snip, excuses and insults, ZZzz] ... You were wrong and LYING, as usual you have NO INTEGRITY. ...
    (misc.health.alternative)
  • Re: This proves Jan is obsessed with me....
    ... Oh, that's right, she's your buddy. ... [snip, excuses and insults, ZZzz] ... You were wrong and LYING, as usual you have NO INTEGRITY. ...
    (misc.health.alternative)
  • Re: Open letter to the Discovery Institute - (penultimate Wells update)
    ... >noctiluca wrote: ... >> the Discovery Institute. ... >[snip some more] ... Self-righteous religious zealots always think they have integrity in ...
    (talk.origins)