Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Sep 2010 19:45:10 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Carl Johnson <carlj@peak.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: extra open ports in rkhunter
Message-ID:  <E0616266-D8C4-43CB-874D-1442CC4AE0F3@mac.com>
In-Reply-To: <87pqwar5sc.fsf@oak.localnet>
References:  <87pqwar5sc.fsf@oak.localnet>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi--

On Sep 18, 2010, at 4:27 PM, Carl Johnson wrote:
> The following are the ports if anybody has any ideas, but I would also like to know how to trace them down myself:
> 
> tcp4       0      0 *.876                  *.*                    LISTEN
> tcp6       0      0 *.921                  *.*                    LISTEN
> udp4       0      0 *.608                  *.*
> udp6       0      0 *.952                  *.*
> udp6       0      0 *.804                  *.*

Try:

  lsof -i tcp:876

...and so forth for the other ports; this will give you the process ID of whatever is holding that socket.

Regards,
-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E0616266-D8C4-43CB-874D-1442CC4AE0F3>