LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-23-2005, 10:55 AM   #1
ddaas
Member
 
Registered: Oct 2004
Location: Romania
Distribution: Ubuntu server, FreeBsd
Posts: 453

Rep: Reputation: 30
unknown ports running


Hi,
On my server the result of #nmap -sS -sU localhost shows some strange/unknown ports running.

For the unknown ports I did #netstat -tupan | grep port_nr
I could identify all ports but 799.

nmap shows: 799/udp open unknown
netstat shows: udp 0 0 0.0.0.0:799 0.0.0.0:* -



What is this 799/udp port?


Does anybody know?


ddaas
 
Old 02-23-2005, 11:03 AM   #2
ToniT
Senior Member
 
Registered: Oct 2003
Location: Zurich, Switzerland
Distribution: Debian/unstable
Posts: 1,357

Rep: Reputation: 47
Code:
lsof -i
 
Old 02-23-2005, 05:19 PM   #3
bagira
LQ Newbie
 
Registered: Dec 2003
Location: Germany
Distribution: Gentoo
Posts: 27

Rep: Reputation: 15
To seem, whats behind port 799, use 'fuser -v 799/tcp'
/bagira
 
Old 02-23-2005, 05:22 PM   #4
bagira
LQ Newbie
 
Registered: Dec 2003
Location: Germany
Distribution: Gentoo
Posts: 27

Rep: Reputation: 15
Oops, sorry, use 'fuser -v 799/upd' ;-=
 
Old 02-24-2005, 04:30 AM   #5
ddaas
Member
 
Registered: Oct 2004
Location: Romania
Distribution: Ubuntu server, FreeBsd
Posts: 453

Original Poster
Rep: Reputation: 30
The output of #fuser -v 799/udp is empty. I ran the command as root.
I also ran : #fuser -v -a 799/udp.

OUTPUT:

USER PID ACCESS COMMAND
799/udp
No process references; use -v for the complete list



I coudn't find nothing with lsof -i.


I don't know what to do.
 
Old 02-24-2005, 05:48 AM   #6
bathory
Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 10,969

Rep: Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343Reputation: 1343
The correct syntax is:
Code:
fuser -v -n udp 799
 
Old 02-24-2005, 06:41 AM   #7
ddaas
Member
 
Registered: Oct 2004
Location: Romania
Distribution: Ubuntu server, FreeBsd
Posts: 453

Original Poster
Rep: Reputation: 30
The output of the command is empty (fuser -v -n udp 799).

This is the only port which is shown from ‘nmap -sU localhost’ that has an empty output from the previous command.


This starts to make me angry


ddaas
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
What command can identify processes running on ports? hello321_1999 Linux - Newbie 2 11-23-2004 06:01 AM
unknown ports open????? globeTrotter Linux - Security 12 09-25-2004 04:46 AM
how 2 get ports having services currently running 00it45 Linux - General 5 03-11-2004 08:59 AM
Running Own Mailserver:Ports,Security mac_phil Linux - Networking 7 12-06-2003 01:32 AM
Daemons running on unknown ports robadawb Linux - Networking 2 11-12-2003 03:11 PM


All times are GMT -5. The time now is 05:35 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration