Date: Tue, 15 Sep 2015 00:13:33 -0700 From: Xin Li <delphij@delphij.net> To: "O. Hartmann" <ohartman@zedat.fu-berlin.de>, freebsd-net@freebsd.org Subject: Re: HELP! Mysterious socket 843/tcp listening on CURRENT system Message-ID: <55F7C51D.4030704@delphij.net> In-Reply-To: <20150915090658.1e0b9074@freyja.zeit4.iv.bundesimmobilien.de> References: <20150915090658.1e0b9074@freyja.zeit4.iv.bundesimmobilien.de>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On 9/15/15 00:06, O. Hartmann wrote: > Hopefully, I'm right on this list. if not, please forward. > > Running CURRENT as of FreeBSD 11.0-CURRENT #3 r287780: Mon Sep 14 13:34:16 > CEST 2015 amd64, I check via nmap for open sockets since I had trouble > protecting a server with IPFW and NAT. > > I see a service (nmap) > > Host is up (0.041s latency). > Not shown: 998 filtered ports > PORT STATE SERVICE > 843/tcp open unknown > > and via sockstat -l -p 843, I get this: > ? ? ? ? tcp4 *:843 *:* Sounds like there is a kernel listener, wild guess -- what does rpcinfo -p say? Cheers, [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJV98UhAAoJEJW2GBstM+ns050QAKrr7sHf1YEyivcbkiguZegx +P/1j9cyBoL3FDs0iH1IU36kaS2HBzlqwjzOuMqzUXopxsAJJDk1a4IAcxUSoqFk eZe2XIxwLirUxClalAhOFSqKzmxmY9/RRfsk6to+FVdL1pTp+4bUzdzHQz8L4s3Q vGnZG6gQjV83Rzv/IRjLSdzFD+1/UjPD8iBtxfNJ2NnzdYDUgWhtmHx69CnIgmYw hymeqhqU2fsI7caNkCbsc1zNe/gXz8tc0ehxQoiBAFtVuOTDt6OMbJ8c0KemR+rr oHaN4f+Tt396g0gSll8ItdD/E3snrsN1tQ6YehK4sR4O0RFPQPCqkwMUuw7Ztcmv AU2frxeKm++bFNjTCO3iluZeozMjk2USzprwXQGZ8ANDFyCiZmuV7dDiaFCv9FBo fCXToZOF2cRysdMrWn4qEcj3vu7/mSFNUEuFBMHhdfncgy+42VZDtk4MSYdpB+ar ybGg4SHV8h9/w1GPoOnsk0CCJqMJActJOgA/9wglDpSA8APPDDSDtIooXt2RaSHa Pci6XSXwbEB8vi/ppMC5uoqVPU5RLR39WWf4yG4tIsTqfgtU7qp8iU2n+0NM9gCt /2vUxPyh5i5Ih4lRbcddQfX/pY2G10UHYHEDheHAXNCsLJYdzyGQ+rSNcIRbrI+q B+NvTVtf+Nyu1sqWTfYc =0eqA -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?55F7C51D.4030704>