LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 10-11-2002, 08:43 AM   #1
luser
LQ Newbie
 
Registered: Oct 2002
Distribution: Slackware
Posts: 8

Rep: Reputation: 0
Port scan


Just curious but when I do a local port scan I get

22/tcp open ssh
80/tcp open http
111/tcp open sunrpc
885/tcp open unknown
899/tcp open unknown
901/tcp open samba-swat
904/tcp open unknown
908/tcp open unknown
912/tcp open unknown
917/tcp open unknown
918/tcp open unknown
945/tcp open unknown
969/tcp open unknown
971/tcp open unknown
3306/tcp open mysql
6000/tcp open X11


I wonder what the unknowns are and the other funny thing is I cant do a remote port scan on it. I run nmap and it just hangs there forever. I can remotely scan another linux machine I have though. Which doesnt make sense to me.

Thanks
 
Old 10-11-2002, 09:32 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,134
Blog Entries: 54

Rep: Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791
The're unassigned addresses, see the nmap services file for more. Dunno why it would hang waiting for response, but you could play with timeout, -T aggressive for instance.
 
Old 10-11-2002, 11:48 AM   #3
luser
LQ Newbie
 
Registered: Oct 2002
Distribution: Slackware
Posts: 8

Original Poster
Rep: Reputation: 0
nmap-services does not have a listing and nmap will run until I cancel it. Also tried many different options I guess my main concern is do you think that it is anything to worry about? After doign a netstat --tcp the foreign address is the same as the local.Could I have some funcky service running that needs those ports?
 
Old 10-11-2002, 01:03 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,134
Blog Entries: 54

Rep: Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791Reputation: 2791
netstat -anp (or lsof) should give you overview and PID of app running on those ports, run the PID against what you see in "ps ax -eo pid,args" or alike and investigate if the binary is ok/allowed to run.
 
Old 10-11-2002, 01:37 PM   #5
luser
LQ Newbie
 
Registered: Oct 2002
Distribution: Slackware
Posts: 8

Original Poster
Rep: Reputation: 0
Thanks for the info that did the trick and it was something that someone previously installed no big deal.

Thanks again.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
port scan. bruse Linux - Networking 1 10-23-2005 05:41 PM
mysqld running and reading for connections on port 3306, no port 3306 found from scan darkenigmaa Linux - Networking 7 09-21-2005 10:10 AM
Port Scan (nmap -st) TroelsSmit Linux - Newbie 2 05-22-2004 03:13 PM
Port Scan on 135 ghight Linux - Security 6 12-15-2003 12:40 PM
port scan Tigger Linux - Security 18 06-08-2003 05:44 PM


All times are GMT -5. The time now is 06:53 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration