I have a server that I didn't know if I should be worried about these ports being open, I looked on google to see if I could find anything on them and I couldn't I didn't know if anyone here would know. I just ran nmap localhost -p 1-60000 and got the output below:

I need all of those open except for 922 and 50724, I can telnet into both of those ports and connect to them but I don't know how to tell what they are when I have connected to them.


Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
Interesting ports on server.domain.com (127.0.0.1):
(The 59990 ports scanned but not shown below are in state: closed)
Port State Service
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
111/tcp open sunrpc
143/tcp open imap2
922/tcp open unknown
3306/tcp open mysql
50724/tcp open unknown


Nmap run completed -- 1 IP address (1 host up) scanned in 4 seconds

Try netstat -at as root to see if you can figure out what they are. If that doesn't work then try addin the -p option to get PID#'s. You can then use the ps PID# command to see who owns it.

Ok that helped alot, now for my next question, the ports are both for rpc:

50724 - rpc.mountd
922 - rpc.quotad

What would these be used for, I am using that server as a nfs server, and I think that is where they came from. I just don't like seeing ports open that I don't know what they are.