Re:  I NEED HELP!!

From: Devon Ryan (dpryan@midway.uchicago.edu)
Date: 11/30/01


Message-ID: <3C0744F3.5060702@midway.uchicago.edu>
Date: Fri, 30 Nov 2001 02:36:03 -0600
From: Devon Ryan <dpryan@midway.uchicago.edu>
To: "R. Toma" <rtoma@yahoo.com.ar>
Subject: Re:  I NEED HELP!!

R. Toma wrote:

> I scanned my homeserver for open ports and I found that I have the ports:
>
> 12345 NetBus
> 20034 NetBus Pro
> 31337 BackOriffice
>
> open. Now, are these the famous trojans? I have linux, aren't they
> programmed for a MS platform? How can I close these ports????
>
> PLEASE!!!

Something tells me that you're running tripwire...or you scanned the
wrong ip :P man netstat to see what process is bound to these ports
(unless GNU/Linux has a tool like FreeBSD's sockstat).

-- 
Devon Ryan                    | dpryan@midway.uchicago.edu
Biology/Neuroscience, Pre-med | http://home.uchicago.edu/~dpryan
SG Unix Systems Administrator | dpryan@sg.uchicago.edu
Max Palevsky RCA              | rca-palevsky@rh.uchicago.edu