port 894?

M0ebius · 04-07-2004, 12:18 PM

Hi all, first post, yeey!

When I nmapped my box today, it showed an open port 894. According to netstat, the program that opened it was xinetd. I tried google, but couldn't find any useful information about the port. After some time and a reboot I nmapped again, and it appeared to be closed. Anyone who knows what service it could have been?

Thanks in advance,
Bram

trickykid · 04-07-2004, 12:38 PM

Looking at the /etc/services file I don't see anything that is sort of reserved for that port. Have you checked your xinetd configurations for anything particular running or setup to run, to narrow it down?

M0ebius · 04-07-2004, 01:04 PM

I got the default redhat "xinetd.conf" file. and I can't find any config file in "/etc/xinetd"
.d that has "disabled = no".

Looked at the "/etc/services" file, can't find 894 either.

michaelk · 04-07-2004, 04:33 PM

According to IANA port 894 is unassigned. IANA is the offical agency that controls assignments for ports 0-1023. So whatever had it open wasn't a offical service. In addition ports 0-1023 can only be used by system processes or root.