Matthias, netstat -atp | less
Regards, Alex. --- PGP/GPG Fingerprint: EFD1 AC6C 7ED5 E453 C367 AC7A B474 16E0 758D 7ED9 -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS/CM>CC/IT d- s:+ a16 C++(++++)>$ UL++++>$ P--- L++>++$ E+ W+(-) N+ o? K? w---() !O !M !V PS+(++)>+ PE-(--) Y+>+ PGP t+>++ !5 X-- R>++ tv(+) b+(++) DI(+) D++ G>+++ e--> h! !r y>+++ ------END GEEK CODE BLOCK------ On Wed, 7 Feb 2001, Matthias G. Imhof wrote: > Performing strobe or nmap on my system, I get, e.g., the following list: > > 79/tcp open finger > 119/tcp open nntp > 143/tcp open imap2 > 540/tcp open uucp > 6667/tcp open irc > 12345/tcp open NetBus > 12346/tcp open NetBus > 31337/tcp open Elite > > However, lsof -i tcp:79 yields nothing. Similarly with the others. > In addition, there should be no irc running, finger is commented from the > inetd.conf, and so on. > > Why do these ports respond to strobe or nmap? Which process controlls them? > > Matthias > > -- > ************************************************************************** > * Matthias G.Imhof, Ph.D. phone: (540) 231 6004 * > * Derring Hall 4044 fax: (540) 231 3386 * > * Virginia Tech email: [EMAIL > PROTECTED] * > * Blacksburg, VA 24061-0420 http://www.geol.vt.edu/profs/mgi * > * There is no dark side of the moon really. Matter of fact it's all dark * > ************************************************************************** > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >