LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 06-26-2011, 11:36 PM   #1
L1nuxn00b703
Member
 
Registered: Sep 2009
Posts: 117

Rep: Reputation: 15
Uncounted for port open


Hi all,
I have a unexplained port open on of my VM's and was wondering if any can help me pinpoint its origin:

Code:
# netstat -nlpt
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 0.0.0.0:30022               0.0.0.0:*                   LISTEN      27749/(squid)
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      3859/portmap
tcp        0      0 0.0.0.0:42069               0.0.0.0:*                   LISTEN      -
tcp        0      0 0.0.0.0:796                 0.0.0.0:*                   LISTEN      3158/rpc.statd
tcp        0      0 :::22475                    :::*                        LISTEN      3435/sshd
It the TCP port 42069 open that I can't pinpoint. Theres also a UDP port open as well.

Code:
# netstat -nlpu
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
udp        0      0 0.0.0.0:790                 0.0.0.0:*                               3158/rpc.statd
udp        0      0 0.0.0.0:793                 0.0.0.0:*                               3158/rpc.statd
udp        0      0 0.0.0.0:48297               0.0.0.0:*                               27749/(squid)
udp        0      0 0.0.0.0:3130                0.0.0.0:*                               27749/(squid)
udp        0      0 0.0.0.0:53951               0.0.0.0:*                               -
udp        0      0 0.0.0.0:111                 0.0.0.0:*                               3859/portmap
When I reboot the server, the port changes. Any ideas?

Thanks.
 
Old 06-27-2011, 01:11 AM   #2
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910Reputation: 910
You could use 'lsof' and search for the port.



Cheers,
Tink
 
Old 06-28-2011, 01:47 AM   #3
L1nuxn00b703
Member
 
Registered: Sep 2009
Posts: 117

Original Poster
Rep: Reputation: 15
Thx for the reply Tinkster. I found the origin of my phantom port, it was related to my the NFS/netfs service that I have running
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
CentOS 5: iptables - cannot open port 80 and nat to port 8080 for Tomcat steve willett Linux - Networking 4 09-24-2010 05:03 AM
If I forward a port in iptables, does the port have to be open on the firewall? qwertyjjj Linux - Server 4 08-06-2009 10:22 AM
port 25 filtered despite firewall having port 25 open ille.pugil42 Linux - Security 8 03-09-2007 01:51 AM
best port scanner To scan open port in a network tanveer Linux - Security 8 01-21-2007 09:19 PM
cannot SFTP to SUSE 9.2 box, port 22 open, can putty in though using same port. jgrady Linux - Networking 6 03-29-2005 09:44 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:37 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration