Re: NewB needs help understanding 'netstat' output
From: ken king (kenkingNOSPAM@knology.net)Date: 05/16/02
- Next message: Tim Haynes: "Re: UPnP Port"
- Previous message: Douglas Cowan: "Re: A better, or worse, spoofing attack?"
- In reply to: ken king: "NewB needs help understanding 'netstat' output"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: ken king <kenkingNOSPAM@knology.net> Date: Thu, 16 May 2002 06:02:49 -0500
ken king wrote:
> I'm fairly new at Linux, so I really don't quite know what I'm doing,
> but....
> Occasionally I do "netstat -tuln" just to see that things don't change,
> but today this is what I got.....
>
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address Foreign Address
> State
> tcp 0 0 0.0.0.0:32768 0.0.0.0:*
> LISTEN
> ----The following line (Port 515) didn't use to be there, but I've
> installed a printer -- so that makes sense
> tcp 0 0 0.0.0.0:515 0.0.0.0:*
> LISTEN
> tcp 0 0 192.168.1.1:139 0.0.0.0:*
> LISTEN
> tcp 0 0 0.0.0.0:143 0.0.0.0:*
> LISTEN
> tcp 0 0 0.0.0.0:111 0.0.0.0:*
> LISTEN
> tcp 0 0 0.0.0.0:6000 0.0.0.0:*
> LISTEN
> tcp 0 0 0.0.0.0:25 0.0.0.0:*
> LISTEN
> udp 0 0 0.0.0.0:32768 0.0.0.0:*
> udp 0 0 192.168.1.1:137 0.0.0.0:*
> udp 0 0 0.0.0.0:137 0.0.0.0:*
> udp 0 0 192.168.1.1:138 0.0.0.0:*
> udp 0 0 0.0.0.0:138 0.0.0.0:*
> udp 0 0 0.0.0.0:111 0.0.0.0:*
> ---The following (port 635) USED to be "0.0.0.0:628" why would it
> change???
> udp 0 0 0.0.0.0:635 0.0.0.0:*
This morning the last line is port 636! I know I'm not dreaming because I
created a cron job to do netstat -tulnp each night and email me the diff
from the day before.
--kk
- Next message: Tim Haynes: "Re: UPnP Port"
- Previous message: Douglas Cowan: "Re: A better, or worse, spoofing attack?"
- In reply to: ken king: "NewB needs help understanding 'netstat' output"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|