From owner-freebsd-security  Wed Dec 12 15:56:51 2001
Delivered-To: freebsd-security@freebsd.org
Received: from cpu1058.adsl.bellglobal.com (cpu1058.adsl.bellglobal.com [207.236.110.39])
	by hub.freebsd.org (Postfix) with SMTP id 6DED837B416
	for <freebsd-security@FreeBSD.ORG>; Wed, 12 Dec 2001 15:56:46 -0800 (PST)
Received: (qmail 72090 invoked from network); 12 Dec 2001 23:57:53 -0000
Received: from unknown (HELO p450.ottawa.com) (bacid@90.0.0.1)
  by 90.0.0.3 with SMTP; 12 Dec 2001 23:57:53 -0000
Message-Id: <5.0.2.1.0.20011212185722.00aaa098@90.0.0.3>
X-Sender: wchan@90.0.0.3
X-Mailer: QUALCOMM Windows Eudora Version 5.0.2
Date: Wed, 12 Dec 2001 18:58:47 -0800
To: freebsd-security@FreeBSD.ORG
From: "Mr. Chan" <bacid@ottawa.com>
Subject: Question about port 50000
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hey,

I installed FBSD 4.4 a few days ago and noticed a weird port that is running..

tcp4       0      0  *.50000                *.*                    LISTEN

Now this is a brand new installation, so i doubt i got hacked/root kitted..

When i telnet to it this is all i get:

 > telnet localhost 50000
Trying 127.0.0.1...
Connected to localhost.cpu1058.adsl.bellglobal.com.
Escape character is '^]'.
help
-Unknown command
?
-Unknown command
?!
-Unknown command


Any ideas?

Thanks


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message