From: Devon Ryan (
Date: 11/30/01

Message-ID: <>
Date: Fri, 30 Nov 2001 02:36:03 -0600
From: Devon Ryan <>
To: "R. Toma" <>
Subject: Re:  I NEED HELP!!

R. Toma wrote:

> I scanned my homeserver for open ports and I found that I have the ports:
> 12345 NetBus
> 20034 NetBus Pro
> 31337 BackOriffice
> open. Now, are these the famous trojans? I have linux, aren't they
> programmed for a MS platform? How can I close these ports????

Something tells me that you're running tripwire...or you scanned the
wrong ip :P man netstat to see what process is bound to these ports
(unless GNU/Linux has a tool like FreeBSD's sockstat).

Devon Ryan                    |
Biology/Neuroscience, Pre-med |
SG Unix Systems Administrator |
Max Palevsky RCA              |