LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 03-02-2005, 03:55 PM   #1
branden_burger
Member
 
Registered: Dec 2004
Posts: 66

Rep: Reputation: 15
possible intrusion? netstat


tcp 0 0 1.install.int:783 *:* LISTEN
tcp 0 0 1.install.int:domain *:* LISTEN
tcp 0 0 1.install.int:rndc *:* LISTEN
tcp 0 0 1.instal:x11-ssh-offset *:* LISTEN
tcp 0 0 1.install.int:6011 *:* LISTEN
tcp 0 0 1.install.int:6012 *:* LISTEN
tcp 0 0 1.install.int:6013 *:* LISTEN

udp 0 0 *:32768 *:*
udp 0 0 1.install.int:32770 1.install.int:32770 ESTABLISHED
udp 0 0 1.install.int:domain *:*

Hello people. The above lines are the lines from my netstat -a output I DON''T understand - what on earth is this install.int? Why is it listening on so many ports? I'm on FC1, kernel 2.4.22-1.2174.nptl

Hoping it's not the worst as I suffered a system crash a few days back.

Thanks

Last edited by branden_burger; 03-02-2005 at 04:01 PM.
 
Old 03-03-2005, 09:19 AM   #2
jonlake
Member
 
Registered: Apr 2004
Distribution: Slackware 11.0, Gentoo
Posts: 252

Rep: Reputation: 31
Look in your sevices file to see what is listening on these ports. Comment them out and see if there are any adverse affects (if this is a possibility, don't want to bring down something on a production box).
 
Old 03-03-2005, 09:42 AM   #3
pk21
Member
 
Registered: Jun 2002
Location: Netherlands - Amsterdam
Distribution: RedHat 9
Posts: 549

Rep: Reputation: 30
looks like it is your hostname?!
 
Old 03-03-2005, 09:54 AM   #4
Kerberus
LQ Newbie
 
Registered: Mar 2005
Posts: 10

Rep: Reputation: 0
yeah looks like your hostname.
do a netstat -natp for more useful info.

Kerberus
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
intrusion? tincat2 Linux - Security 2 01-01-2005 01:56 AM
ssh intrusion! DavidPhillips Linux - General 17 11-19-2004 06:39 AM
Intrusion Detection L1nuxbug Linux - Security 4 07-21-2004 05:20 AM
Intrusion Detection!!! egyptian Linux - Security 2 04-02-2004 11:37 AM
Intrusion Detection? matador Linux - Security 5 09-03-2003 04:44 AM


All times are GMT -5. The time now is 03:19 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration