Re: Possible security problem?

From: James D. Beard (jim.beard_at_verizon.net)
Date: 07/27/05


Date: Wed, 27 Jul 2005 21:56:35 GMT

Tony Cameron wrote:
> I am running a Mac G5 with 10.3.9 and have just discovered that at
> regular but intermittent intervals, several times an hour, the process
> nmbd attempts to make a UDP contact with a wide variety of addresses
> mostly US based, but some European, on various ports ranging from 135 to
> 62253.

If you are running OS X, see if your system has the command
lsof. If so, read the man page and use it to see what file(s)
are associated with the attempt to make the UDP contact.

The lsof is available on Linux, but I am too lazy to go to
my wife's G5 and check for you. <g>

jim b.

-- 
Unix is not user-unfriendly; it merely
      expects users to be computer-friendly.


Relevant Pages

  • RE: Locking down UDP ports
    ... lsof |grep -i UDP ... and if you don't have lsof (why linux distributions don't install it by default??????) try on www.rpmfind.net ... Subject: Locking down UDP ports ...
    (Security-Basics)
  • Re: NTP server problem
    ... > and added a 'restrict' line for my local subnet. ... Use 'ntpq -p' to see that ntpd is working properly. ... NTP uses UDP, not TCP. ... Try 'lsof -i UDP' and you should see it: ...
    (Fedora)
  • Re: rmcd wont listen 657 tcp?
    ... I'm pretty sure you will only see "LISTEN" for TCP ports not UDP. ... $ lsof -i tcp:657 ...
    (comp.unix.aix)

Quantcast