From owner-freebsd-questions@FreeBSD.ORG Wed Jun 8 03:25:04 2005 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E01C416A426 for ; Wed, 8 Jun 2005 03:25:04 +0000 (GMT) (envelope-from bob@ibsd.us) Received: from chaos.fxp.org (chaos.fxp.org [216.155.111.15]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9A0FC43D1F for ; Wed, 8 Jun 2005 03:25:04 +0000 (GMT) (envelope-from bob@ibsd.us) Received: from localhost (localhost.fxp.org [127.0.0.1]) by chaos.fxp.org (Postfix) with ESMTP id DA71228451; Tue, 7 Jun 2005 23:25:03 -0400 (EDT) Received: from chaos.fxp.org ([127.0.0.1]) by localhost (chaos.fxp.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 19812-02-4; Tue, 7 Jun 2005 23:24:59 -0400 (EDT) Received: from [192.168.1.102] (66-169-119-88.dhcp.ftwo.tx.charter.com [66.169.119.88]) by chaos.fxp.org (Postfix) with ESMTP id 9E31928456; Tue, 7 Jun 2005 23:24:59 -0400 (EDT) Message-ID: <42A66509.4070709@ibsd.us> Date: Tue, 07 Jun 2005 22:24:57 -0500 From: Bob Bomar User-Agent: Mozilla Thunderbird 1.0.2 (Macintosh/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: kalin mintchev References: <59030.68.165.89.73.1118200333.squirrel@68.165.89.73> In-Reply-To: <59030.68.165.89.73.1118200333.squirrel@68.165.89.73> X-Enigmail-Version: 0.89.5.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at fxp.org Cc: questions@freebsd.org Subject: Re: ircd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2005 03:25:05 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 kalin mintchev wrote: | | hi all... | | i found this 2 lines in the netstat output on one of my machines. we are | not running ircd and according to nmap ports 3483 and 2143 are closed... | | can somebody please explain?? thanks..... | | tcp4 0 0 server.3484 zagreb.hr.eu.und.ircd | ESTABLISHED | tcp4 0 0 server.2143 free.tyranz.com.ircd | ESTABLISHED Are you running any kind of irc client? The output means: There are 2 connections, one on port 3484, and another on 2143 connected to zagreb.hr.eu.und and free.tyranz.com on the port for ircd, port 6667. Some trojens use irc channels for control, might look into that. - -- Bob Bomar bob@bomar.us http://www.bomar.us/~bob -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCpmUH9Jm/aTrtdKoRArViAJ4pU6PUuUXD/Hu0yR03/SqwaYi9ewCgop6K WZz26GJmYJSl/FpbquE0hh4= =Yqid -----END PGP SIGNATURE-----