From owner-freebsd-questions@FreeBSD.ORG Sat Nov 8 18:45:42 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D496F16A4CF for ; Sat, 8 Nov 2003 18:45:42 -0800 (PST) Received: from endif.cjb.net (65-101-229-205.dnvr.qwest.net [65.101.229.205]) by mx1.FreeBSD.org (Postfix) with SMTP id 85E3A43FF7 for ; Sat, 8 Nov 2003 18:45:40 -0800 (PST) (envelope-from end@endif.cjb.net) Received: (qmail 64346 invoked from network); 9 Nov 2003 02:45:43 -0000 Received: from localhost (end@127.0.0.1) by localhost with SMTP; 9 Nov 2003 02:45:43 -0000 Date: Sat, 8 Nov 2003 19:45:43 -0700 From: Robin Schoonover To: "Peter Kok" Message-Id: <20031108194543.1a8bbf04.end@endif.cjb.net> In-Reply-To: References: X-Mailer: Sylpheed version 0.9.6claws (GTK+ 1.2.10; i386-portbld-freebsd5.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: questions@FreeBSD.org Subject: Re: unkown this port X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Nov 2003 02:45:43 -0000 On Sat, 08 Nov 2003 21:23:13 -0500, "Peter Kok" wrote: > > I got this port 1658 opening on the server > > > udp4 0 0 *.* *.* > udp4 0 0 *.1658 *.* > udp4 0 0 *.* *.* > > I checked this internet and this port is for sixnetudr > > but > > 1/ I don't know what it is? > 2/ I don't know which programming the server is running on this port? > 3/ I don't know the server is compromised or not > Check sockstat (sockstat -l | grep :1658 is best for what you want). It'll tell you exactly what is listening at that port. From there you can determine whether it is a good thing or a bad thing. -- Robin Schoonover (aka End) # # I don't want to bore you, but there's nobody else around for me to bore. #