Hello,
Is there any malicious think listening these ports :
Starting nmap V. 2.12 by Fyodor ([EMAIL PROTECTED], www.insecure.org/nmap/)
Interesting ports on news.pcl.fr (195.6.210.99):
PortState Protocol Service
1996openudptr-rsrb-port
1997openudp
On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> At 03.06.2002, Jacques Lav!gnotte wrote:
> > Is there any malicious think listening these ports :
> >
> > Starting nmap V. 2.12 by Fyodor ([EMAIL PROTECTED], www.insecure.org/nmap/)
> > Interesting ports on news.pcl.fr (195.6.210.9
On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> Hallo Jacques,
Hallo Guido,
> > Interesting ports on news.pcl.fr (195.6.210.99):
> > PortState Protocol Service
> > 1996openudptr-rsrb-port
> > 1997openudpgdp-port
>
> lsof -Pi |
Are you sure they are open and nmap isn't just returning a false
positive?
Try a #netstat -vatn on the local server and see if those ports really
are open.
- James
> -Original Message-
> From: Jacques Lav!gnotte [mailto:[EMAIL PROTECTED]]
> Sent: Monday, June 03, 2002 4:40 PM
> To: [EM
On Mon, Jun 03, 2002 at 11:38:06PM +0300, Sami Haahtinen wrote:
> better yet -- lsof -Pi :
news:~# lsof -Pi udp:1996
news:~# lsof -Pi udp:1997
Nothing displayed neither...
> Sami
Jacques
--
0CBE 3F8A 5A77 A35C 27C7 2D42 3EC5 806B 9178 088D
--
To UNSUBSC
On Mon, Jun 03, 2002 at 10:43:48PM +0200, Guido Hennecke wrote:
> Hallo Jacques,
>
> At 03.06.2002, Jacques Lav!gnotte wrote:
> > On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> [...]
> > > lsof -Pi | grep
> > > (on the local system)
> > news:~# lsof -Pi | grep 1996
> > news:~#
Or better yet
#netstat -atp
to see what is listening on those ports, if anything.
Those ports are used by cisco routers for gateway discovery.
- Steve
> -Original Message-
> From: James [mailto:[EMAIL PROTECTED]]
> Sent: Monday, June 03, 2002 4:47 PM
> To: 'Jacques Lav!gnotte'; [EMAIL
At 10:43 PM +0200 6/3/02, Guido Hennecke wrote:
>netstat -an | grep
That command will only tell him "yup, it's LISTENING", but won't tell
him WHAT is listening on that port.
D
--
+-+-+
| [EMAIL PROTECTED] | "Thou art the ruins of
On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> Are you sure they are open and nmap isn't just returning a false
> positive?
>
> Try a #netstat -vatn on the local server and see if those ports really
> are open.
news:~# netstat -vatn
Active Internet connections (servers and established)
On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> Are you sure they are open and nmap isn't just returning a false
> positive?
>
> Try a #netstat -vatn on the local server and see if those ports really
> are open.
Nmap issued from the host itself does not returns anything either...
news:
On Mon, Jun 03, 2002 at 04:12:55PM -0500, Lance Heller wrote:
>
> Starting nmap V. 2.53 by [EMAIL PROTECTED] ( www.insecure.org/nmap/ )
> Interesting ports on news.pcl.fr (195.6.210.99):
> Port State Service
> 1996/udp opentr-rsrb-port
> 1997/udp opengd
>Can anybody try this from elsewhere :
> # nmap -sU -p 1996-1997 news.pcl.fr
I'm not seeing it open. Perhaps some weird internet quirkiness? :)
- James
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
On Mon, Jun 03, 2002 at 11:38:06PM +0300, Sami Haahtinen wrote:
> On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> > lsof -Pi | grep
>
> better yet -- lsof -Pi :
>
> this reminds me of the 'oh, so familiar', Useless Use of
> -awards from usenet =)
I contest this! "Useless Us
On Mon, Jun 03, 2002 at 11:05:44PM +0200, Guido Hennecke wrote:
> So i think, there are no open Ports.
>
> Another possibility is, your system was hacked.
chkrootkit-0.35 is running everyday, using a new fresh compiled binary,
and nothing is found.
So, will see,
Thank you everyone,
Hi All,
I am trying to implement a way of transfering files
securely over the Internet using sftp which is part of the ssh2
protocol. A down side of implementing this is that users logging on can
browse the whole filesystem. I have done some research and found a way to
chroot users so t
On Mon, Jun 03, 2002 at 10:57:46PM +0200, Jacques Lav!gnotte wrote:
> On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> > Are you sure they are open and nmap isn't just returning a false
> > positive?
> >
> > Try a #netstat -vatn on the local server and see if those ports really
> > are op
[snip]
> news:~# netstat -vatn
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address Foreign Address State
> tcp0 0 195.6.210.99:22 80.9.25.228:654 ESTABLISHED
> tcp0 53 195.6.210.99:22 193.250
Hello,
Is there any malicious think listening these ports :
Starting nmap V. 2.12 by Fyodor ([EMAIL PROTECTED], www.insecure.org/nmap/)
Interesting ports on news.pcl.fr (195.6.210.99):
PortState Protocol Service
1996openudptr-rsrb-port
1997openudp
On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> At 03.06.2002, Jacques Lav!gnotte wrote:
> > Is there any malicious think listening these ports :
> >
> > Starting nmap V. 2.12 by Fyodor ([EMAIL PROTECTED], www.insecure.org/nmap/)
> > Interesting ports on news.pcl.fr (195.6.210.99
On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> Hallo Jacques,
Hallo Guido,
> > Interesting ports on news.pcl.fr (195.6.210.99):
> > PortState Protocol Service
> > 1996openudptr-rsrb-port
> > 1997openudpgdp-port
>
> lsof -Pi |
Are you sure they are open and nmap isn't just returning a false
positive?
Try a #netstat -vatn on the local server and see if those ports really
are open.
- James
> -Original Message-
> From: Jacques Lav!gnotte [mailto:[EMAIL PROTECTED]
> Sent: Monday, June 03, 2002 4:40 PM
> To: debia
On Mon, Jun 03, 2002 at 11:38:06PM +0300, Sami Haahtinen wrote:
> better yet -- lsof -Pi :
news:~# lsof -Pi udp:1996
news:~# lsof -Pi udp:1997
Nothing displayed neither...
> Sami
Jacques
--
0CBE 3F8A 5A77 A35C 27C7 2D42 3EC5 806B 9178 088D
--
To UNSUBSCR
On Mon, Jun 03, 2002 at 10:43:48PM +0200, Guido Hennecke wrote:
> Hallo Jacques,
>
> At 03.06.2002, Jacques Lav!gnotte wrote:
> > On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> [...]
> > > lsof -Pi | grep
> > > (on the local system)
> > news:~# lsof -Pi | grep 1996
> > news:~#
Or better yet
#netstat -atp
to see what is listening on those ports, if anything.
Those ports are used by cisco routers for gateway discovery.
- Steve
> -Original Message-
> From: James [mailto:[EMAIL PROTECTED]
> Sent: Monday, June 03, 2002 4:47 PM
> To: 'Jacques Lav!gnotte'; debian-s
At 10:43 PM +0200 6/3/02, Guido Hennecke wrote:
netstat -an | grep
That command will only tell him "yup, it's LISTENING", but won't tell
him WHAT is listening on that port.
D
--
+-+-+
| [EMAIL PROTECTED] | "Thou art the ruins of
On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> Are you sure they are open and nmap isn't just returning a false
> positive?
>
> Try a #netstat -vatn on the local server and see if those ports really
> are open.
news:~# netstat -vatn
Active Internet connections (servers and established)
On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> Are you sure they are open and nmap isn't just returning a false
> positive?
>
> Try a #netstat -vatn on the local server and see if those ports really
> are open.
Nmap issued from the host itself does not returns anything either...
news:~
On Mon, Jun 03, 2002 at 04:12:55PM -0500, Lance Heller wrote:
>
> Starting nmap V. 2.53 by [EMAIL PROTECTED] ( www.insecure.org/nmap/ )
> Interesting ports on news.pcl.fr (195.6.210.99):
> Port State Service
> 1996/udp opentr-rsrb-port
> 1997/udp opengdp
>Can anybody try this from elsewhere :
> # nmap -sU -p 1996-1997 news.pcl.fr
I'm not seeing it open. Perhaps some weird internet quirkiness? :)
- James
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
On Mon, Jun 03, 2002 at 11:38:06PM +0300, Sami Haahtinen wrote:
> On Mon, Jun 03, 2002 at 10:31:22PM +0200, Guido Hennecke wrote:
> > lsof -Pi | grep
>
> better yet -- lsof -Pi :
>
> this reminds me of the 'oh, so familiar', Useless Use of
> -awards from usenet =)
I contest this! "Useless Use
On Mon, Jun 03, 2002 at 11:05:44PM +0200, Guido Hennecke wrote:
> So i think, there are no open Ports.
>
> Another possibility is, your system was hacked.
chkrootkit-0.35 is running everyday, using a new fresh compiled binary,
and nothing is found.
So, will see,
Thank you everyone,
Hi All,
I am trying to implement a way of transfering files
securely over the Internet using sftp which is part of the ssh2
protocol. A down side of implementing this is that users logging on can
browse the whole filesystem. I have done some research and found a way to
chroot users so t
On Mon, Jun 03, 2002 at 10:57:46PM +0200, Jacques Lav!gnotte wrote:
> On Mon, Jun 03, 2002 at 04:46:36PM -0400, James wrote:
> > Are you sure they are open and nmap isn't just returning a false
> > positive?
> >
> > Try a #netstat -vatn on the local server and see if those ports really
> > are ope
37 matches
Mail list logo
