Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 02 Jan 2001 14:03:49 -0500
From:      Daniel Frazier <dfrazier@magpage.com>
To:        Chris Smith <chris@amgroupadmin.com>
Cc:        Freebsd Questions <freebsd-questions@FreeBSD.ORG>
Subject:   Re: open ports on my gateway...how do i find out what is running
Message-ID:  <3A522615.74890581@magpage.com>
References:  <023301c074ed$6b248300$0c00a8c0@amgroupadmin.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Chris Smith wrote:
> 
> I ran nmap on my local gateway ( 4.2-STABLE FreeBSD 4.2-STABLE #0: Thu Dec
> 28 09:29:04 PST  i386) and it shows the following ports open.  Port 22-ssh
> is ok, but the rest are a mystery to me.
> 
> How do I find out what processes are occupying these ports?  I want to find
> out whether I have been hacked or if these are something else that I need to
> deactivate.  The only port I expect to find open is 22.
> 
> (The 65530 ports scanned but not shown below are in state: closed)
> Port       State       Service
> 22/tcp     open        ssh
> 1780/tcp   open        unknown
> 2071/tcp   open        unknown
> 3529/tcp   open        unknown
> 4140/tcp   open        unknown
> 

these show up as unknown because they're not in /etc/services...  
try running...

netstat -a | grep LISTEN

-- 
----------------------------------------------------------------------
Daniel Frazier  <dfrazier@magpage.com>   Tel:  302-239-5900 Ext. 231
System Administrator                     Fax:  302-239-3909
MAGPAGE, We Power the Internet           WWW:  http://www.magpage.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A522615.74890581>