LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices



Reply
 
Search this Thread
Old 07-24-2006, 03:19 PM   #1
cwhh
LQ Newbie
 
Registered: Sep 2005
Posts: 25

Rep: Reputation: 15
Why is there a python listening on port 32769?


I used netstat and lsof to find which daemons listening on some ports and found that python is listening on port 32769 although it is a loopback. Anyone knows what that is?

cwh
 
Old 07-24-2006, 04:00 PM   #2
Matir
Moderator
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Ubuntu
Posts: 8,507

Rep: Reputation: 118Reputation: 118
No, though netstat should show the PID of the process, which you can lookup in /proc/<pid>/ to learn more about the process in question.
 
Old 07-24-2006, 10:39 PM   #3
Penguin of Wonder
Senior Member
 
Registered: Sep 2005
Location: West Virginia
Distribution: Gentoo
Posts: 1,249

Rep: Reputation: 45
Its nothing to worry about. I once read what this is and why its there, but it slips me at the moment. Alot of firewalls will actually try to ban Python, but its not sending or recieving about you over the internet. Don't block it and don't worry about it.
 
Old 07-25-2006, 02:33 PM   #4
cwhh
LQ Newbie
 
Registered: Sep 2005
Posts: 25

Original Poster
Rep: Reputation: 15
The ps line of python process indicated /usr/sbin/hpssd
Actually, I installed sarge by default installation. Also, added the following:

desktop environment
alsa and sound-juicer
hplip (it depends on cups, samba)
firestarter firewall
mozilla-firefox and -thunderbird

Probably hpssd belongs to hplip (hp printer driver) I have not checked yet.
If that is the case, hplip might be the culprit.

cwh
 
Old 07-25-2006, 05:47 PM   #5
Matir
Moderator
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Ubuntu
Posts: 8,507

Rep: Reputation: 118Reputation: 118
Code:
dpkg-query -S /usr/sbin/hpssd
Should reveal your culprit.
 
Old 09-16-2006, 05:45 PM   #6
zapotek
LQ Newbie
 
Registered: Jun 2004
Distribution: PCLinuxOS
Posts: 16

Rep: Reputation: 0
I have the same problem:
python keeps listening on a random (open!) port. why?!

Code:
# netstat -nlp -A inet
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:4746          0.0.0.0:*               LISTEN      2205/python
tcp        0      0 127.0.0.1:3828          0.0.0.0:*               LISTEN      2193/hpiod
tcp        0      0 0.0.0.0:631             0.0.0.0:*               LISTEN      2285/cupsd
udp        0      0 0.0.0.0:68              0.0.0.0:*                           3537/dhclient
udp        0      0 224.0.1.1:123           0.0.0.0:*                           2955/ntpd
udp        0      0 127.0.0.1:123           0.0.0.0:*                           2955/ntpd
udp        0      0 0.0.0.0:123             0.0.0.0:*                           2955/ntpd
Code:
# nmap -PS/PA/PU -p1-65535 -sV --osscan-guess localhost

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-09-17 00:17 EEST
Interesting ports on localhost (127.0.0.1):
Not shown: 65532 closed ports
PORT     STATE SERVICE VERSION
631/tcp  open  ipp     CUPS 1.1
3828/tcp open  hpiod   HP Linux Imaging and Printing System
4746/tcp open  unknown
after a reboot python is listening on other ports

Code:
 # netstat -nlp -A inet
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:4323          0.0.0.0:*               LISTEN      2195/hpiod
tcp        0      0 0.0.0.0:631             0.0.0.0:*               LISTEN      2287/cupsd
tcp        0      0 127.0.0.1:4281          0.0.0.0:*               LISTEN      2207/python
udp        0      0 0.0.0.0:68              0.0.0.0:*                           2496/dhclient
udp        0      0 224.0.1.1:123           0.0.0.0:*                           3341/ntpd
udp        0      0 localhost:123        0.0.0.0:*                           3341/ntpd
udp        0      0 127.0.0.1:123           0.0.0.0:*                           3341/ntpd
udp        0      0 0.0.0.0:123             0.0.0.0:*                           3341/ntpd
Code:
# nmap -PS/PA/PU -p1-65535 -sV --osscan-guess localhost

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-09-19 16:52 EEST
Interesting ports on localhost (127.0.0.1):
Not shown: 65532 closed ports
PORT     STATE SERVICE VERSION
631/tcp  open  ipp     CUPS 1.1
4281/tcp open  unknown
4323/tcp open  hpiod   HP Linux Imaging and Printing System

Last edited by zapotek; 09-19-2006 at 09:55 AM.
 
Old 09-22-2006, 04:55 AM   #7
zapotek
LQ Newbie
 
Registered: Jun 2004
Distribution: PCLinuxOS
Posts: 16

Rep: Reputation: 0
python listening on google?

it seems that python is listening on google, and hpiod to 81.196.193.137 (port 80)
here it is:

# netstat -pant
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
PID/Program name
tcp 0 0 127.0.0.1:1127 0.0.0.0:* LISTEN
2206/python
tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 2286/cupsd
tcp 0 0 127.0.0.1:5627 0.0.0.0:* LISTEN 2194/hpiod
tcp 0 0 localhost:4469 81.196.193.137:80 ESTABLISHED 4488/mozilla-firefo
tcp 0 0 localhost:3212 72.14.221.99:80 ESTABLISHED 4488/mozilla-firefo
tcp 0 0 localhost:5209 81.196.193.161:80 ESTABLISHED 4488/mozilla-firefo
tcp 0 0 localhost:3339 72.14.221.147:80 ESTABLISHED 4488/mozilla-firefo
tcp 0 0 localhost:3381 72.14.221.147:80 ESTABLISHED 4488/mozilla-firefo
tcp 0 0 127.0.0.1:5627 127.0.0.1:1233 ESTABLISHED 2194/hpiod
tcp 0 0 127.0.0.1:1233 127.0.0.1:5627 ESTABLISHED 2206/python
tcp 0 0 localhost:5890 72.14.221.104:80 ESTABLISHED 4488/mozilla-firefo
tcp 71804 0 localhost:4229 88.191.28.249:8000 ESTABLISHED 4394/amarokapp

Last edited by zapotek; 09-22-2006 at 05:01 AM.
 
Old 09-22-2006, 10:43 AM   #8
Penguin of Wonder
Senior Member
 
Registered: Sep 2005
Location: West Virginia
Distribution: Gentoo
Posts: 1,249

Rep: Reputation: 45
Quote:
Originally Posted by Penguin of Wonder
Its nothing to worry about. Don't block it and don't worry about it.
E-mail the Python Foundation if your that concerned.
 
Old 09-22-2006, 11:09 AM   #9
Matir
Moderator
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Ubuntu
Posts: 8,507

Rep: Reputation: 118Reputation: 118
I don't see either python or hpiod touching anything outside your system... both of their lines from netstat indicate loopback connections.
 
Old 09-22-2006, 11:55 AM   #10
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,708
Blog Entries: 54

Rep: Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965Reputation: 2965
Open files from running "lsof" on the Python PID could reveal what it's used for.


Its nothing to worry about. I once read what this is and why its there, but it slips me at the moment.
If you don't have a clue, why not skip posting?


Alot of firewalls will actually try to ban Python
W/o a list of FW's that do that and their valid reasons why that statement sounds like male bovine excrement to me. With all due respect, of course.
 
Old 09-22-2006, 09:10 PM   #11
Penguin of Wonder
Senior Member
 
Registered: Sep 2005
Location: West Virginia
Distribution: Gentoo
Posts: 1,249

Rep: Reputation: 45
Quote:
Originally Posted by unSpawn
Open files from running "lsof" on the Python PID could reveal what it's used for.


Its nothing to worry about. I once read what this is and why its there, but it slips me at the moment.
If you don't have a clue, why not skip posting?


Alot of firewalls will actually try to ban Python
W/o a list of FW's that do that and their valid reasons why that statement sounds like male bovine excrement to me. With all due respect, of course.
Since you "work" here, I'll spare you the rude reply. :-)
 
Old 10-23-2006, 02:27 AM   #12
argsv
LQ Newbie
 
Registered: Oct 2006
Posts: 1

Rep: Reputation: 0
thanks for the tips.
I think that belongs to the HP Linux Printing and Imaging System (hpilp) process(es).
After I removed it (since I don't don't to print), the process was gone from netstat.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
tcp listening port help pbaxter Linux - Networking 4 07-11-2006 04:38 PM
2 servers listening on port 80 possible? scrawl Linux - Software 1 03-13-2005 06:06 PM
listening to a usb port fred22 Programming 0 01-11-2005 08:53 PM
ssh listening on port 22 sharpie Linux - Security 9 06-08-2004 04:28 PM
xinetd port 32768, 32769 normal? Guru3 Linux - Networking 2 12-11-2003 05:49 PM


All times are GMT -5. The time now is 08:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration