Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Dec 2001 15:53:57 -0800
From:      "Crist J. Clark" <cristjc@earthlink.net>
To:        Ronald Clark <rclark@swbanktx.com>
Cc:        "Freebsd-Questions (E-mail)" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: open ports
Message-ID:  <20011212155357.J487@gohan.cjclark.org>
In-Reply-To: <E1497354C15DD4119A5500204840E20503629070@swbtexch2.swbanktx.com>; from rclark@swbanktx.com on Wed, Dec 12, 2001 at 03:58:44PM -0600
References:  <E1497354C15DD4119A5500204840E20503629070@swbtexch2.swbanktx.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 12, 2001 at 03:58:44PM -0600, Ronald Clark wrote:
> Hello all,
> 
>   I have a question. I just ran an nmap scan against my FreeBSD 4.4 stable
> box. It showed that udp port 1505 was open. I then ran netstat -a and the
> 1505 port did not show up, either as ESTABLISHED or LISTEN.

UDP ports don't have states, but that's another issue.

> My /etc/services
> file shows 1505 to be a Funk Proxy software package (makers of Steel Belted
> Radius). Any ideas what this could be, and how to shut it off?

If you run it again, is it still there? Most likely, some process
(e.g. DNS or even nmap itself) was using 1505 as a source port when it
was scanned. By the time you checked netstat(1), it was gone.
-- 
Crist J. Clark                           cjclark@alum.mit.edu

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011212155357.J487>