From owner-freebsd-hackers  Tue Jul 24 20:59:24 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from newsguy.com (smtp.newsguy.com [209.155.56.71])
	by hub.freebsd.org (Postfix) with ESMTP id 631D437B407
	for <freebsd-hackers@FreeBSD.ORG>; Tue, 24 Jul 2001 20:59:21 -0700 (PDT)
	(envelope-from dcs@newsguy.com)
Received: from newsguy.com (ppp045-bsace7001.telebrasilia.net.br [200.181.80.45])
	by newsguy.com (8.9.1a/8.9.1) with ESMTP id UAA01675;
	Tue, 24 Jul 2001 20:59:13 -0700 (PDT)
Message-ID: <3B5E4495.E947F34C@newsguy.com>
Date: Wed, 25 Jul 2001 01:01:25 -0300
From: "Daniel C. Sobral" <dcs@newsguy.com>
X-Mailer: Mozilla 4.77 [en] (Win98; U)
X-Accept-Language: en,pt-BR,pt,en-GB,en-US,ja
MIME-Version: 1.0
To: Jett Tayer <jett@laguna.i-next.net>
Cc: freebsd-hackers <freebsd-hackers@FreeBSD.ORG>
Subject: Re: not showing in ps
References: <02a401c114bb$8d986820$4b443dca@jett>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

Jett Tayer wrote:
> 
> im running freebsd 3.5-stable
> when i did netstat -an | grep LISTEN
> 
> here's the result
> 
> bash-2.04$ netstat -an | grep LISTEN
> tcp        0      0 *.80                  *.*                   LISTEN
> tcp        0      0 *.443                 *.*                   LISTEN
> tcp        0      0 *.31341               *.*                   LISTEN
> tcp        0      0 *.22                  *.*                   LISTEN
> 
> noticed the 31341 port that is listening
> then i did
> 
> bash-2.04$ telnet localhost 31341
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> SSH-1.5-1.2.27
> 
> then on port 22
> bash-2.04$ telnet localhost 22
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> SSH-1.5-OpenSSH_2.9p2
> 
> how i may kill that 31341 port coz ps isnt showing it.

Install lsof and try "lsof -i :31341". But, frankly, it looks like you
have been hacked.

31337 = Elite. 31341 is too close to that.

-- 
Daniel C. Sobral			(8-DCS)
dcs@newsguy.com
dcs@freebsd.org
capo@the.secret.bsdconspiracy.net

	wow regex humor... I'm a geek

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message