You could install the lsof utility and grep the output of it for something
like:

lsof | grep TCP
lsof | grep TCP | grep ":32771"

It will list the process that owns the socket.

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] Behalf Of Hicks,
Rodger
Sent: Thursday, December 04, 2003 1:20 PM
To: [EMAIL PROTECTED]
Subject: [FW-1] Solaris Hardening and ports 32771 - 32776


I've hardened my Solaris box by shutting down many of the startup scripts
including s71rpc, s73nfs.client, s73cachefs.daemon and s71sysid.sys and
commented out ALL services in /etc/inetd.conf however after reboot my server
keeps listening on ports 32771 thru 32776.

Any idea why?  I thought these were rpc ports for services in inetd.conf.
Are these Checkpoint NG ports?

thanks!!
Rodger

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to