port 62997 open
i just installed slack 10 fresh this weekend (ive had it on for a while but dropline took out a buncha libs), i booted up today and checked the listening ports. theres one i cant identify - port 62997. here netstat -lv:
Code:
tcp 0 0 *:x11 *:* LISTEN
tcp 0 0 *:62997 *:* LISTEN
tcp 0 0 *:ssh *:* LISTEN
udp 0 0 *:bootpc *:*
and here's ps -ax:
Code:
PID TTY STAT TIME COMMAND
1 ? S 0:05 init [3]
2 ? S 0:00 [migration/0]
3 ? SN 0:00 [ksoftirqd/0]
4 ? S< 0:00 [events/0]
5 ? S< 0:00 [kblockd/0]
6 ? S 0:00 [khubd]
7 ? S 0:00 [pdflush]
8 ? S 0:00 [pdflush]
9 ? S 0:00 [kswapd0]
10 ? S< 0:00 [aio/0]
11 ? S 0:00 [kseriod]
12 ? S 0:00 [kjournald]
415 ? S 0:00 [kjournald]
436 ? Ss 0:00 /usr/sbin/syslogd
439 ? Ss 0:00 /usr/sbin/klogd -c 3 -x
457 ? Ss 0:00 /sbin/dhcpcd -d -t 10 eth0
560 ? S<s 0:00 udevd
1190 ? Ss 0:00 /usr/sbin/inetd
1193 ? Ss 0:00 /usr/sbin/sshd
1202 ? S 0:00 /usr/sbin/crond -l10
1204 ? Ss 0:00 /usr/sbin/atd -b 15 -l 1
1208 ? Ss 0:00 /usr/sbin/acpid
1265 ? Ss 0:00 /usr/sbin/gpm -m /dev/mouse -t imps2
1267 tty1 Ss 0:00 -bash
1268 tty2 Ss+ 0:00 /sbin/agetty 38400 tty2 linux
1269 tty3 Ss+ 0:00 /sbin/agetty 38400 tty3 linux
1270 tty4 Ss+ 0:00 /sbin/agetty 38400 tty4 linux
1271 tty5 Ss+ 0:00 /sbin/agetty 38400 tty5 linux
1272 tty6 Ss+ 0:00 /sbin/agetty 38400 tty6 linux
1305 tty1 S+ 0:00 /bin/sh /usr/X11R6/bin/startx
1318 tty1 S+ 0:00 xinit /usr/X11R6/lib/X11/xinit/xinitrc --
1319 ? SL 0:21 X :0
1325 tty1 S 0:00 /usr/X11R6/bin/fluxbox
1340 ? Ss 0:04 wish /usr/bin/amsn
1578 ? Z 0:00 [play] <defunct>
1585 ? Ss 0:00 /bin/sh /apps/firefox/firefox
1599 ? S 0:00 /bin/sh /apps/firefox/run-mozilla.sh /apps/firefox/fi
1604 ? S 0:08 /apps/firefox/firefox-bin
1607 ? S 0:00 /apps/firefox/firefox-bin
1608 ? S 0:00 /apps/firefox/firefox-bin
1610 ? S 0:00 /usr/libexec/gconfd-2 11
1612 ? S 0:00 /apps/firefox/firefox-bin
1615 ? Rs 0:00 aterm -sh 80 -tr -fg white -bg black -trsb
1616 pts/0 Rs 0:00 bash
1624 ? Z 0:00 [netstat] <defunct>
1625 ? Ss 0:00 aterm -sh 80 -tr -fg white -bg black -trsb
1626 pts/1 Ss+ 0:00 bash
1632 pts/0 R+ 0:00 ps -ax
i tried connecting with telnet, it says it made a connection, but theres no service banner that comes up or anything. i noticed samba had a buncha weird ports open, i so i shut that down too. i checked /etc/rc.d for any weird executable services, but they all look normal. google doesnt show me anything about that port either.
anyone got any ideas ? |
