From owner-freebsd-questions Tue Jan 2 17: 3:24 2001 From owner-freebsd-questions@FreeBSD.ORG Tue Jan 2 17:03:22 2001 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from warspite.cnchost.com (warspite.concentric.net [207.155.248.9]) by hub.freebsd.org (Postfix) with ESMTP id 544EF37B402 for ; Tue, 2 Jan 2001 17:03:22 -0800 (PST) Received: from chris (las-DSL113-cust059.mpowercom.net [208.57.113.59]) by warspite.cnchost.com id UAA24357; Tue, 2 Jan 2001 20:03:17 -0500 (EST) [ConcentricHost SMTP Relay 1.10] Errors-To: Message-ID: <001501c07520$f4f0d100$0c00a8c0@amgroupadmin.com> From: "Chris Smith" To: "Nimble" Cc: "Freebsd Questions" References: <200101021718.00000081@captain> Subject: Re: open ports on my gateway...how do i find out what is running Date: Tue, 2 Jan 2001 17:03:16 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 Disposition-Notification-To: "Chris Smith" X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > On Tue, 2 Jan 2001 11:32:41 -0800, Chris Smith wrote: > > ># sockstat > output snipped > >I don't see any indication of ports 1780, 2071, 3529, 4140. > > Chris, > > chances are that those high ports are opened by one of your client > applications currently running > > but then I don't know the full scope of your setup. > > > It's possible... I really don't have anything complicated happening here... major functions of this box are sshd, natd, dhcpd. No mail, httpd or anything else, pretty simple. Are these maybe the outgoing ports from a TCP session coming from my internal LAN? If so that would make much more sense. I do have some redirected ports in natd.conf but the ones that I am seeing here are not what I have redirected. I wonder why I can't find out what's sitting on those ports though. I would think that between sockstat and netstat I could tell, even if it was an internal session it should at least show natd is using them or something of that nature. Does anyone else have any other ideas how to find which process is using which port? I will post my ps ax output tomorrow after my buildworld finishes (kinda messy right now with all the work going on). Thanks for the replies so far, I've already learned a few new tricks. Chris Smith _________________ IT Department American Group Administrators First National Administrators To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message