LinuxQuestions.org - possible intrusion? netstat

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - possible intrusion? netstat (https://www.linuxquestions.org/questions/linux-security-4/possible-intrusion-netstat-296838/)

possible intrusion? netstat

tcp 0 0 1.install.int:783 *:* LISTEN
tcp 0 0 1.install.int:domain *:* LISTEN
tcp 0 0 1.install.int:rndc *:* LISTEN
tcp 0 0 1.instal:x11-ssh-offset *:* LISTEN
tcp 0 0 1.install.int:6011 *:* LISTEN
tcp 0 0 1.install.int:6012 *:* LISTEN
tcp 0 0 1.install.int:6013 *:* LISTEN

udp 0 0 *:32768 *:*
udp 0 0 1.install.int:32770 1.install.int:32770 ESTABLISHED
udp 0 0 1.install.int:domain *:*

Hello people. The above lines are the lines from my netstat -a output I DON''T understand - what on earth is this install.int? Why is it listening on so many ports? I'm on FC1, kernel 2.4.22-1.2174.nptl

Hoping it's not the worst as I suffered a system crash a few days back.

Thanks

Look in your sevices file to see what is listening on these ports. Comment them out and see if there are any adverse affects (if this is a possibility, don't want to bring down something on a production box).

looks like it is your hostname?!

yeah looks like your hostname.
do a netstat -natp for more useful info.

Kerberus