Re: unkown this port
On Sat, Nov 08, 2003 at 09:23:13PM -0500, Peter Kok wrote: > I got this port 1658 opening on the server > > > udp4 0 0 *.**.* > udp4 0 0 *.1658 *.* > udp4 0 0 *.**.* > > I checked this internet and this port is for sixnetudr > > but > > 1/ I don't know what it is? > 2/ I don't know which programming the server is running on this port? > 3/ I don't know the server is compromised or not > sockstat(1) is the command you need. This will show you what process has that port open. Try: % sockstat -l | grep 1658 Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: unkown this port
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 crap your right.. im a little off today :/ - -Frank Erik Trulsson wrote: |On Sat, Nov 08, 2003 at 09:41:30PM -0500, Frank Laszlo wrote: | |>-BEGIN PGP SIGNED MESSAGE- |>Hash: SHA1 |> |> |>Have you tried telneting to the port? | | |Telnet uses TCP. That port is an UDP port. Telneting to it will not |work. | |>- -Frank |> |> |>Peter Kok wrote: |> |>| Hi all |>| |>| I got this port 1658 opening on the server |>| |>| |>| udp4 0 0 *.**.* |>| udp4 0 0 *.1658 *.* |>| udp4 0 0 *.**.* |>| |>| I checked this internet and this port is for sixnetudr |>| |>| but |>| |>| 1/ I don't know what it is? |>| 2/ I don't know which programming the server is running on this port? |>| 3/ I don't know the server is compromised or not |>| |>| Thank you for your help | | -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ra1RRvtDYOTUKtsRAr24AJ9L8E/hYtor7TteU8hfACAFTX+mQwCgu07e 96Op4RW7iIv6Zfs5OfcISPk= =WRLj -END PGP SIGNATURE- ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: unkown this port
On Sat, Nov 08, 2003 at 09:41:30PM -0500, Frank Laszlo wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Have you tried telneting to the port? Telnet uses TCP. That port is an UDP port. Telneting to it will not work. > > - -Frank > > > Peter Kok wrote: > > | Hi all > | > | I got this port 1658 opening on the server > | > | > | udp4 0 0 *.**.* > | udp4 0 0 *.1658 *.* > | udp4 0 0 *.**.* > | > | I checked this internet and this port is for sixnetudr > | > | but > | > | 1/ I don't know what it is? > | 2/ I don't know which programming the server is running on this port? > | 3/ I don't know the server is compromised or not > | > | Thank you for your help -- Erik Trulsson [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: unkown this port
On Sat, Nov 08, 2003 at 09:23:13PM -0500, Peter Kok wrote: > Hi all > > I got this port 1658 opening on the server > > > udp4 0 0 *.**.* > udp4 0 0 *.1658 *.* > udp4 0 0 *.**.* > > I checked this internet and this port is for sixnetudr Or for anything else that might choose to use it. Any program can listen on any port >1023. (Port numbers <1024 are normally only usable by programs running as root.) > > but > > 1/ I don't know what it is? > 2/ I don't know which programming the server is running on this port? Use sockstat(1) or the sysutils/lsof port to see which program is listening on that port. -- Erik Trulsson [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: unkown this port
On Sat, 08 Nov 2003 21:23:13 -0500, "Peter Kok" <[EMAIL PROTECTED]> wrote: > > I got this port 1658 opening on the server > > > udp4 0 0 *.**.* > udp4 0 0 *.1658 *.* > udp4 0 0 *.**.* > > I checked this internet and this port is for sixnetudr > > but > > 1/ I don't know what it is? > 2/ I don't know which programming the server is running on this port? > 3/ I don't know the server is compromised or not > Check sockstat (sockstat -l | grep :1658 is best for what you want). It'll tell you exactly what is listening at that port. From there you can determine whether it is a good thing or a bad thing. -- Robin Schoonover (aka End) # # I don't want to bore you, but there's nobody else around for me to bore. # ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: unkown this port
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Have you tried telneting to the port? - -Frank Peter Kok wrote: | Hi all | | I got this port 1658 opening on the server | | | udp4 0 0 *.**.* | udp4 0 0 *.1658 *.* | udp4 0 0 *.**.* | | I checked this internet and this port is for sixnetudr | | but | | 1/ I don't know what it is? | 2/ I don't know which programming the server is running on this port? | 3/ I don't know the server is compromised or not | | Thank you for your help | | Peter | | _ | Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=dept/bcomm&pgmarket=en-ca&RU=http%3a%2f%2fjoin.msn.com%2f%3fpage%3dmisc%2fspecialoffers%26pgmarket%3den-ca | | ___ | [EMAIL PROTECTED] mailing list | http://lists.freebsd.org/mailman/listinfo/freebsd-questions | To unsubscribe, send any mail to "[EMAIL PROTECTED]" -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ralZRvtDYOTUKtsRAr1lAJ0cNhkHcu21QNM2lVozuRrVjWm+vQCfQetQ KdVCls/uL+weq8qtCdzzG78= =Zsha -END PGP SIGNATURE- ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
