Unknow process listening on high port

From: Shawn Badger (sbadger_at_cskauto.com)
Date: 10/25/05

  • Next message: S.A.B.R.O. Net Security: "Re: Ecryption Cracking Tools" 
    To: security-basics@securityfocus.com
Date: Tue, 25 Oct 2005 06:33:16 -0700

    I have been auditing a couple of my Suse enterprise 9 servers and have
    come across a different port on each of them that doesn't show up when I
    use lsof, but show up in nmap and netstat. The ports are 39207/tcp on
    one server and 49751/tcp on the other. When I do lsof -i -n and grep it
    for the proper port I get no output. When I do netstat -ap I get an
    output, but the pid shows up as -. I haven't seen a process show up as a
    - before and don't where to start looking for that process. Here is the
    output of the netstat:
    server1:~# netstat -ap |grep 39207

    tcp 0 0 *:39207 *:*
    LISTEN -

    I get the same results on the other server as well Any ideas would be
    appreciated.

  • Next message: S.A.B.R.O. Net Security: "Re: Ecryption Cracking Tools"

    Relevant Pages

    • RE: Some technical errors
      ... If the SMTP server is not running on port 25 TCP it is not a public ... Manager - Computer Assurance Services BDO Chartered Accountants & ...
      (Security-Basics)
    • Re: SRV RRs support in Internet Explorer?
      ... The port number could be implicit (i.e. ... At any point in time, a server could fail ... can't effectively LB or backup because NSs cache the records for the TTL ... I still don't see how SRV records would help backup or LB. ...
      (microsoft.public.win2000.dns)
    • Re: Slow Box
      ... server, any scripts on the web site? ... Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers ... For lsof and netstat, there are too many lines to paste. ...
      (comp.os.linux.misc)
    • Re: Still cant connect to RWW or OWA remotely
      ... I get 'cannot find server or dns error' on both ... TCP [port number]> to open the ports. ... As for error messages when I fail to access RWW with the laptop, ... network, no connection seems possible. ...
      (microsoft.public.windows.server.sbs)
    • Re: cannot send mail from Windows mail
      ... When a username/password combination doesn't work in Windows Mail, ... I mean I dont use it but as outgoing address for my ISP account. ... youir username and password are correct for your mail server". ... Ask your home ISP if they support SMTP on a port other than 25. ...
      (microsoft.public.windows.vista.mail)