From owner-freebsd-questions@freebsd.org Thu Aug 5 01:39:19 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7048665A117 for ; Thu, 5 Aug 2021 01:39:19 +0000 (UTC) (envelope-from nparhar@gmail.com) Received: from mail-pj1-x102a.google.com (mail-pj1-x102a.google.com [IPv6:2607:f8b0:4864:20::102a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4GgB9L2XWmz3lmC for ; Thu, 5 Aug 2021 01:39:18 +0000 (UTC) (envelope-from nparhar@gmail.com) Received: by mail-pj1-x102a.google.com with SMTP id e2-20020a17090a4a02b029016f3020d867so6256116pjh.3 for ; Wed, 04 Aug 2021 18:39:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=DHDU+5O3zZ6Aze/yK1s9vxekE22V3Eojjll233fXmPI=; b=EbIyVNxB2T9RRUImOqXPO04TKZGBPtQ8k89RAs1jDmQ60hsU/4iESg4TL1MFsoQZ7E IgvIt00Hsl8lc/bzTsTBu/MHBrZpjPcWI4B04pZtNNJdrIf12uW1KyPcbF4aKwuydvtC n5OWlW/LOYJcCQg8jE1OPM4CZES+t0BvB9QqgLxk1YtdmME26VVE37BeEopxb/ENeyUA ZHG6scnXkx7DuiXtkv7bREiGyevfLCjSSP2X4pESGZ6kXn+A1OyvEhpc859e5n3p7Q1Y eUOM9pli0sF0jbHWEArjs5JxgHTpDDY1DepZFqmE3Z4n0GK/B3bk7HPATuxi9kVsn5Vc WIGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=DHDU+5O3zZ6Aze/yK1s9vxekE22V3Eojjll233fXmPI=; b=MX41+2vV7kaSJsDMAw9HhnthESEmOxB6fgksjF7U2zsgHGKNX2Cebn2/3q/c+0lidl 64WsTz0DVg80GRwfHHBUqQONXJExrDHkI1kgSod3RN3DDBnGerD3aJ0VAtVrG2T0hnjy Fz/UBIjw8unYREXeYveBDPj2nLkGKQh+Ou6kH2pbfONYQxYvZ5k4wQAOGYgRUmONvpaj hcbCJssrJHybHfb125jKRTUK/yghKJHSiXpjtMslvSM/21jBxvc0FaeIsj8bDNLklWHU eBQ5HQ1Wk7Ex8JLCadYhAOFclbRUxoAqB5PfVEvSyc+4Hns/DUXwHsuKV1/o1+8Spdqr aS7A== X-Gm-Message-State: AOAM532s3/KTs0qhXdKQWnfwfxrz1ACNCnYdmbUe7s+hlggHtFcXPjfd GgrhZU5RtcO7F6eLXdb1A1ExT9ycwXs= X-Google-Smtp-Source: ABdhPJypxkZGsMXQ6faM+iW5e0Q8Va/XMsQyWMaIsAKogZNdcC514iPPSE9sPXD7O3L8gcm98HtmUA== X-Received: by 2002:a62:154d:0:b029:3b9:e5df:77a6 with SMTP id 74-20020a62154d0000b02903b9e5df77a6mr2293126pfv.18.1628127557074; Wed, 04 Aug 2021 18:39:17 -0700 (PDT) Received: from [10.192.166.0] (stargate.chelsio.com. [12.32.117.8]) by smtp.googlemail.com with ESMTPSA id t6sm7336751pjo.4.2021.08.04.18.39.15 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 04 Aug 2021 18:39:16 -0700 (PDT) Subject: Re: Port 111 (rpcbind) To: "@lbutlr" , FreeBSD References: <9E9E62BA-5930-49C1-81B5-773352932729@kreme.com> From: Navdeep Parhar Message-ID: <160770c8-b18b-7832-cb88-dcc15bd023e0@gmail.com> Date: Wed, 4 Aug 2021 18:39:11 -0700 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0 MIME-Version: 1.0 In-Reply-To: <9E9E62BA-5930-49C1-81B5-773352932729@kreme.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4GgB9L2XWmz3lmC X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=EbIyVNxB; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of nparhar@gmail.com designates 2607:f8b0:4864:20::102a as permitted sender) smtp.mailfrom=nparhar@gmail.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::102a:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Aug 2021 01:39:19 -0000 On 8/4/21 6:36 PM, @lbutlr wrote: > I got an alert from my NSP that port 111 was open on my FreeBSD boxing they would like it closed (and a synlogoy,ut that is OT). I checked and it is in fact open. But I do not have rpcbind installed on the machine. > > How do I check what processes is responsible for that port? > # sockstat -n4 | grep -w 111