From owner-freebsd-questions Tue Jan 2 10:54:25 2001 From owner-freebsd-questions@FreeBSD.ORG Tue Jan 2 10:54:22 2001 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from renown.cnchost.com (renown.concentric.net [207.155.248.7]) by hub.freebsd.org (Postfix) with ESMTP id 0E93637B400 for ; Tue, 2 Jan 2001 10:54:22 -0800 (PST) Received: from chris (las-DSL113-cust059.mpowercom.net [208.57.113.59]) by renown.cnchost.com id NAA04601; Tue, 2 Jan 2001 13:54:21 -0500 (EST) [ConcentricHost SMTP Relay 1.10] Errors-To: Message-ID: <023301c074ed$6b248300$0c00a8c0@amgroupadmin.com> From: "Chris Smith" To: "Freebsd Questions" Subject: open ports on my gateway...how do i find out what is running Date: Tue, 2 Jan 2001 10:54:11 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 Disposition-Notification-To: "Chris Smith" X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I ran nmap on my local gateway ( 4.2-STABLE FreeBSD 4.2-STABLE #0: Thu Dec 28 09:29:04 PST i386) and it shows the following ports open. Port 22-ssh is ok, but the rest are a mystery to me. How do I find out what processes are occupying these ports? I want to find out whether I have been hacked or if these are something else that I need to deactivate. The only port I expect to find open is 22. (The 65530 ports scanned but not shown below are in state: closed) Port State Service 22/tcp open ssh 1780/tcp open unknown 2071/tcp open unknown 3529/tcp open unknown 4140/tcp open unknown Thanks Chris Smith _________________ IT Department American Group Administrators First National Administrators To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message