On Sat, Nov 08, 2003 at 09:23:13PM -0500, Peter Kok wrote: > I got this port 1658 opening on the server > > > udp4 0 0 *.* *.* > udp4 0 0 *.1658 *.* > udp4 0 0 *.* *.* > > I checked this internet and this port is for sixnetudr > > but > > 1/ I don't know what it is? > 2/ I don't know which programming the server is running on this port? > 3/ I don't know the server is compromised or not >
sockstat(1) is the command you need. This will show you what process
has that port open. Try:
% sockstat -l | grep 1658
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614 Bucks., SL7 1TH UK
pgp00000.pgp
Description: PGP signature
