Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Nov 2003 07:55:18 +0000
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Peter Kok <cckok00@hotmail.com>
Cc:        questions@freebsd.org
Subject:   Re: unkown this port
Message-ID:  <20031109075518.GA99614@happy-idiot-talk.infracaninophile.co.uk>
In-Reply-To: <LAW11-F126CLjme2E8H00026e51@hotmail.com>
References:  <LAW11-F126CLjme2E8H00026e51@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Nov 08, 2003 at 09:23:13PM -0500, Peter Kok wrote:

> I got this port 1658 opening on the server
>=20
>=20
> udp4       0      0  *.*                    *.*
> udp4       0      0  *.1658                 *.*
> udp4       0      0  *.*                    *.*
>=20
> I checked this internet and this port is for sixnetudr
>=20
> but
>=20
> 1/ I don't know what it is?
> 2/ I don't know which programming the server is running on this port?
> 3/ I don't know the server is compromised or not
>=20

sockstat(1) is the command you need.  This will show you what process
has that port open.  Try:

    % sockstat -l | grep 1658

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK

--+QahgC5+KEYLbs62
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQE/rfLmdtESqEQa7a0RAn1zAJ9XUcoStWOu+Kixb3vLY9dE/GLf3gCfYAtD
4uJMgHgRzdTe33P/As+4kjs=
=t75t
-----END PGP SIGNATURE-----

--+QahgC5+KEYLbs62--


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031109075518.GA99614>