I have some RHEL 5 systems that are listening on tcp ports 4000 and 4001. The services file lists this as terabase and newoak. I really can't find anything relevant on either of those. Does anyone know what applications are really using these ports on RHEL 5?

Thanks!

On the server that is listening type: lsof -i :4000 to see what process is listening on that port.

Do lsof -i :4001 for the other port.

On my RHEL5 I see same definitions in /etc/services but nothing is running on those ports so those are in the distribution /etc/services rather than being any you added. Note that /etc/services just tries to equate a port to name - it doesn't actually reserve it. Once you find what is using the ports you may want to update name into /etc/services for each of the ports to something more meaningful to you.

That did it. It was the sybase dataserver and backup server respectively. I'll have to update the services file.

Thanks!