From owner-freebsd-questions Tue Jan 2 11: 4: 1 2001 From owner-freebsd-questions@FreeBSD.ORG Tue Jan 2 11:03:59 2001 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from trinity.magpage.com (trinity.magpage.com [216.155.0.8]) by hub.freebsd.org (Postfix) with ESMTP id ADB3D37B400 for ; Tue, 2 Jan 2001 11:03:58 -0800 (PST) Received: from magpage.com (poomba.magpage.com [216.155.24.136]) by trinity.magpage.com (8.11.1/8.11.1) with ESMTP id f02J3nM18447; Tue, 2 Jan 2001 14:03:49 -0500 Sender: dfrazier@magpage.com Message-ID: <3A522615.74890581@magpage.com> Date: Tue, 02 Jan 2001 14:03:49 -0500 From: Daniel Frazier Organization: Magpage Internet Services X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: Chris Smith Cc: Freebsd Questions Subject: Re: open ports on my gateway...how do i find out what is running References: <023301c074ed$6b248300$0c00a8c0@amgroupadmin.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Chris Smith wrote: > > I ran nmap on my local gateway ( 4.2-STABLE FreeBSD 4.2-STABLE #0: Thu Dec > 28 09:29:04 PST i386) and it shows the following ports open. Port 22-ssh > is ok, but the rest are a mystery to me. > > How do I find out what processes are occupying these ports? I want to find > out whether I have been hacked or if these are something else that I need to > deactivate. The only port I expect to find open is 22. > > (The 65530 ports scanned but not shown below are in state: closed) > Port State Service > 22/tcp open ssh > 1780/tcp open unknown > 2071/tcp open unknown > 3529/tcp open unknown > 4140/tcp open unknown > these show up as unknown because they're not in /etc/services... try running... netstat -a | grep LISTEN -- ---------------------------------------------------------------------- Daniel Frazier Tel: 302-239-5900 Ext. 231 System Administrator Fax: 302-239-3909 MAGPAGE, We Power the Internet WWW: http://www.magpage.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message