From owner-freebsd-questions Thu Jan 6 11:25:30 2000 Delivered-To: freebsd-questions@freebsd.org Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207]) by hub.freebsd.org (Postfix) with ESMTP id 30A7014CE5 for ; Thu, 6 Jan 2000 11:25:22 -0800 (PST) (envelope-from cjc@cc942873-a.ewndsr1.nj.home.com) Received: (from cjc@localhost) by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.9.3) id OAA20342; Thu, 6 Jan 2000 14:29:48 -0500 (EST) (envelope-from cjc) From: "Crist J. Clark" Message-Id: <200001061929.OAA20342@cc942873-a.ewndsr1.nj.home.com> Subject: Re: netstat -a | grep LISTEN (question) In-Reply-To: from William Melanson at "Jan 6, 2000 01:14:25 pm" To: wjm@gate.net (William Melanson) Date: Thu, 6 Jan 2000 14:29:48 -0500 (EST) Cc: freebsd-questions@FreeBSD.ORG Reply-To: cjclark@home.com X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG William Melanson wrote, > > Hello all, > > tcp 0 0 *.http *.* LISTEN > tcp 0 0 *.6000 *.* LISTEN > tcp 0 0 *.1024 *.* LISTEN > tcp 0 0 *.smtp *.* LISTEN > tcp 0 0 *.pop3 *.* LISTEN > tcp 0 0 *.telnet *.* LISTEN > tcp 0 0 *.ftp *.* LISTEN > > > The only listening ports I'm curious about are 6000 which points to the X > Window System and 1024 which says (within /etc/services) it's a registered > port. Do these 2 listening ports possibly represent a venue for an > intruder to compromise? Does anyone have a bit more info in regards to > these 2 open ports in question? Do, % netstat -A | grep LISTEN And note the address of the sockets of interets. Then, % fstat | grep To find the process that has it open. Actually, sockstat(1) probably can do all of this really easily, but I have not quite got the hang of it yet; it's fairly new. -- Crist J. Clark cjclark@home.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message