From owner-freebsd-security Mon Oct 18 13:17: 6 1999 Delivered-To: freebsd-security@freebsd.org Received: from lanshark.lanminds.com (lanshark.lanminds.com [208.25.68.5]) by hub.freebsd.org (Postfix) with ESMTP id 76EB6151DB for ; Mon, 18 Oct 1999 13:16:58 -0700 (PDT) (envelope-from todd@lmi.net) Received: from drtboi.lanminds.com (drtboi.lmi.net [208.25.91.219]) by lanshark.lanminds.com (8.8.8/8.8.7) with ESMTP id NAA25736; Mon, 18 Oct 1999 13:16:28 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: Date: Mon, 18 Oct 1999 13:16:28 -0700 (PDT) Reply-To: todd@lmi.net Organization: LMI.net From: Todd Meister To: "Chris D. Faulhaber" Subject: Re: Suspect port... Cc: freebsd-security@FreeBSD.ORG, tomb Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 18-Oct-99 Chris D. Faulhaber wrote: > On Mon, 18 Oct 1999, tomb wrote: > >> Hi, >> I just ran nmap on myself to see what was open and this appeared. >> >> 1446 open tcp ora-lm >> >> I killed Netscape and it disappeared. Has anyone any idea what this is? >> I've noticed this kind of thing, myself. Usually, no ports but the expected are open on my box, but sometimes, ports associated with random services I know I'm not running will be open. I've come to the conclusion that the connections are either http or domain connections, though I could definitely be wrong. Does a netstat -f inet show anything? -Todd To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message