when I typed:

netstat -pla the output was:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:1024 *:* LISTEN 774/rpc.statd

---- DELETED LINES -------


udp 0 0 *:1024 *:* 774/rpc.statd
udp 0 0 *:sunrpc *:* 746/portmap
raw 0 0 *:255 *:* 7 891/dsniff


The only part that bothers me is the last line...particularly: 891/dsniff

What can I do to find out more about this???

I am running RH 9.0 on a 1GHz, IBM TP.

Thanks to all that can help...

dsniff is probably being used for network monitoring to generate graphable statistics. Note that I said "probably". Investigate more In the Red Hat documentation (man pages?) and on Google. Note that dsniff gets used for a lot of other purposes besides the one it was created for, so of course there are going to be lots of articles on how to use it in mean ways, too.