---------------------------------------------------------------- BEFORE YOU POST, search the faq at <http://java.apache.org/faq/> WHEN YOU POST, include all relevant version numbers, log files, and configuration files. Don't make us guess your problem!!! ---------------------------------------------------------------- Hi, I am running ApacheJserv 1.1 with Apache 1.3.12 (ApJServManual off) on a Linux machine with linux kernel 2.3.99-pre2. I was looking at the output of netstat to see if anybody was connecting to my machine and noticed a recurrent local connection that was not due to anything I was doing. To discern what this was I ran: netstat -c > & NETSTAT2 grep "localhost" NETSTAT2 and was rewarded with the output: 44:tcp 0 0 localhost:8007 localhost:2163 TIME_WAIT 165:tcp 0 0 localhost:8007 localhost:2164 TIME_WAIT 286:tcp 0 0 localhost:8007 localhost:2165 TIME_WAIT 406:tcp 0 0 localhost:8007 localhost:2166 TIME_WAIT 527:tcp 0 0 localhost:8007 localhost:2167 TIME_WAIT 651:tcp 0 0 localhost:8007 localhost:2168 TIME_WAIT 784:tcp 0 0 localhost:8007 localhost:2169 TIME_WAIT 917:tcp 0 0 localhost:8007 localhost:2170 TIME_WAIT 1050:tcp 0 0 localhost:8007 localhost:2171 TIME_WAIT 1181:tcp 0 0 localhost:8007 localhost:2172 TIME_WAIT 1312:tcp 0 0 localhost:8007 localhost:2173 TIME_WAIT and an earlier run of the same sort of thing (at a much differnt time) revealed: 138:tcp 0 0 localhost:8007 localhost:3488 TIME_WAIT 328:tcp 0 0 localhost:8007 localhost:3489 TIME_WAIT 518:tcp 0 0 localhost:8007 localhost:3490 TIME_WAIT 708:tcp 0 0 localhost:8007 localhost:3491 TIME_WAIT 896:tcp 0 0 localhost:8007 localhost:3492 TIME_WAIT 1080:tcp 0 0 localhost:8007 localhost:3493 TIME_WAIT 1269:tcp 0 0 localhost:8007 localhost:3494 TIME_WAIT 1459:tcp 0 0 localhost:8007 localhost:3495 TIME_WAIT 1658:tcp 0 0 localhost:8007 localhost:3496 TIME_WAIT 1848:tcp 0 0 localhost:8007 localhost:3497 TIME_WAIT 2038:tcp 0 0 localhost:8007 localhost:3498 TIME_WAIT 2228:tcp 0 0 localhost:8007 localhost:3499 TIME_WAIT (background info: 8007 is the port my Jserv is running on, and "netstat -c" a continuously refreshed list of any ports open on the machine). It looks like the jserv is port scanning my own machine? This worries me very much. Is this a sign of some sort of remote attach or is this some sort of ping thing that apache is doing to awaken the jserv every once in a while. This should certainly not be a reflection of any real network activity since I don't even have any real active servlets. I guess this does not have to be a portscan -- if httpd is opening a socket every second or so to the java server then it would look like a port scan since the port numbers would be growing (as the OS increments them). Still, I would appreciate any explanation. Thanks, Sheer El-Showk -- -------------------------------------------------------------- Please read the FAQ! <http://java.apache.org/faq/> To subscribe: [EMAIL PROTECTED] To unsubscribe: [EMAIL PROTECTED] Archives and Other: <http://java.apache.org/main/mail.html> Problems?: [EMAIL PROTECTED]
