Hi all,
I have a unexplained port open on of my VM's and was wondering if any can help me pinpoint its origin:
Code:
# netstat -nlpt
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:30022 0.0.0.0:* LISTEN 27749/(squid)
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 3859/portmap
tcp 0 0 0.0.0.0:42069 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:796 0.0.0.0:* LISTEN 3158/rpc.statd
tcp 0 0 :::22475 :::* LISTEN 3435/sshd
It the TCP port 42069 open that I can't pinpoint. Theres also a UDP port open as well.
Code:
# netstat -nlpu
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp 0 0 0.0.0.0:790 0.0.0.0:* 3158/rpc.statd
udp 0 0 0.0.0.0:793 0.0.0.0:* 3158/rpc.statd
udp 0 0 0.0.0.0:48297 0.0.0.0:* 27749/(squid)
udp 0 0 0.0.0.0:3130 0.0.0.0:* 27749/(squid)
udp 0 0 0.0.0.0:53951 0.0.0.0:* -
udp 0 0 0.0.0.0:111 0.0.0.0:* 3859/portmap
When I reboot the server, the port changes. Any ideas?
Thanks.