unknown ports running

ddaas · 02-23-2005, 09:55 AM

Hi,
On my server the result of #nmap -sS -sU localhost shows some strange/unknown ports running.

For the unknown ports I did #netstat -tupan | grep port_nr
I could identify all ports but 799.

nmap shows: 799/udp open unknown
netstat shows: udp 0 0 0.0.0.0:799 0.0.0.0:* -

What is this 799/udp port?

Does anybody know?

ddaas

ToniT · 02-23-2005, 10:03 AM

Code:

lsof -i

bagira · 02-23-2005, 04:19 PM

To seem, whats behind port 799, use 'fuser -v 799/tcp'
/bagira

bagira · 02-23-2005, 04:22 PM

Oops, sorry, use 'fuser -v 799/upd' ;-=

ddaas · 02-24-2005, 03:30 AM

The output of #fuser -v 799/udp is empty. I ran the command as root.
I also ran : #fuser -v -a 799/udp.

OUTPUT:

USER PID ACCESS COMMAND
799/udp
No process references; use -v for the complete list

I coudn't find nothing with lsof -i.

I don't know what to do.

bathory · 02-24-2005, 04:48 AM

The correct syntax is:

Code:

fuser -v -n udp 799

ddaas · 02-24-2005, 05:41 AM

The output of the command is empty (fuser -v -n udp 799).

This is the only port which is shown from ‘nmap -sU localhost’ that has an empty output from the previous command.

This starts to make me angry

ddaas