From owner-freebsd-net@freebsd.org Tue Sep 15 07:13:38 2015 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A7343A04EA1 for ; Tue, 15 Sep 2015 07:13:38 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from anubis.delphij.net (anubis.delphij.net [64.62.153.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "anubis.delphij.net", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8E9911BCE for ; Tue, 15 Sep 2015 07:13:38 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from Xins-MBP.home.us.delphij.net (unknown [IPv6:2601:646:8f00:8a91:1450:4ad4:ce47:8f80]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by anubis.delphij.net (Postfix) with ESMTPSA id A2198215EE; Tue, 15 Sep 2015 00:13:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delphij.net; s=anubis; t=1442301217; x=1442315617; bh=FLd/0DSPJ5E6dEDPX4dmzG30iSs2m2EGeWv8lBTALZ0=; h=Subject:To:References:From:Date:In-Reply-To; b=JvnSr8MHV8wHEg3qjF3uyPoGVWL9T1DKWkg0agQqlAZ0QIOCeAPPdFDzHQSy1LpCb GrLxfC32scrgkOQQmixp7b47LiyPwqykobMkjpK3IT7NynjutC7xUUePL1sNUlMH6P akhZ3f75FBKHrUzNKsvEzf7DkHEhdqDB8/WTkQ9Q= Subject: Re: HELP! Mysterious socket 843/tcp listening on CURRENT system To: "O. Hartmann" , freebsd-net@freebsd.org References: <20150915090658.1e0b9074@freyja.zeit4.iv.bundesimmobilien.de> From: Xin Li Message-ID: <55F7C51D.4030704@delphij.net> Date: Tue, 15 Sep 2015 00:13:33 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <20150915090658.1e0b9074@freyja.zeit4.iv.bundesimmobilien.de> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="8IPNETFb9HcdhmfIv8oNciJbUnI8U1AnK" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Sep 2015 07:13:38 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --8IPNETFb9HcdhmfIv8oNciJbUnI8U1AnK Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 9/15/15 00:06, O. Hartmann wrote: > Hopefully, I'm right on this list. if not, please forward. >=20 > Running CURRENT as of FreeBSD 11.0-CURRENT #3 r287780: Mon Sep 14 13:3= 4:16 > CEST 2015 amd64, I check via nmap for open sockets since I had trouble > protecting a server with IPFW and NAT. >=20 > I see a service (nmap) >=20 > Host is up (0.041s latency). > Not shown: 998 filtered ports > PORT STATE SERVICE > 843/tcp open unknown >=20 > and via sockstat -l -p 843, I get this: > ? ? ? ? tcp4 *:843 *:* Sounds like there is a kernel listener, wild guess -- what does rpcinfo -p say? Cheers, --8IPNETFb9HcdhmfIv8oNciJbUnI8U1AnK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJV98UhAAoJEJW2GBstM+ns050QAKrr7sHf1YEyivcbkiguZegx +P/1j9cyBoL3FDs0iH1IU36kaS2HBzlqwjzOuMqzUXopxsAJJDk1a4IAcxUSoqFk eZe2XIxwLirUxClalAhOFSqKzmxmY9/RRfsk6to+FVdL1pTp+4bUzdzHQz8L4s3Q vGnZG6gQjV83Rzv/IRjLSdzFD+1/UjPD8iBtxfNJ2NnzdYDUgWhtmHx69CnIgmYw hymeqhqU2fsI7caNkCbsc1zNe/gXz8tc0ehxQoiBAFtVuOTDt6OMbJ8c0KemR+rr oHaN4f+Tt396g0gSll8ItdD/E3snrsN1tQ6YehK4sR4O0RFPQPCqkwMUuw7Ztcmv AU2frxeKm++bFNjTCO3iluZeozMjk2USzprwXQGZ8ANDFyCiZmuV7dDiaFCv9FBo fCXToZOF2cRysdMrWn4qEcj3vu7/mSFNUEuFBMHhdfncgy+42VZDtk4MSYdpB+ar ybGg4SHV8h9/w1GPoOnsk0CCJqMJActJOgA/9wglDpSA8APPDDSDtIooXt2RaSHa Pci6XSXwbEB8vi/ppMC5uoqVPU5RLR39WWf4yG4tIsTqfgtU7qp8iU2n+0NM9gCt /2vUxPyh5i5Ih4lRbcddQfX/pY2G10UHYHEDheHAXNCsLJYdzyGQ+rSNcIRbrI+q B+NvTVtf+Nyu1sqWTfYc =0eqA -----END PGP SIGNATURE----- --8IPNETFb9HcdhmfIv8oNciJbUnI8U1AnK--