October 6, 201015 yr This is a scan of my unraid host: Port Scan has started… Port Scanning host: 192.168.0.193 Open TCP Port: 21 ftp Open TCP Port: 23 telnet Open TCP Port: 37 time Open TCP Port: 80 http Open TCP Port: 111 sunrpc Open TCP Port: 139 netbios-ssn Open TCP Port: 445 microsoft-ds Open TCP Port: 2049 nfsd Open TCP Port: 8080 http-alt Open TCP Port: 41360 Open TCP Port: 55628 Open TCP Port: 59956 Port Scan has completed… Does anyone know what the last three ports are for?
October 6, 201015 yr lsof is you friend lsof -i :80 lsof -i :80 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME emhttp 1682 root 3u IPv4 5009 TCP *:http (LISTEN)
October 6, 201015 yr netstat is even a better friend: root@aa:~# netstat -n -l -p Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:6789 0.0.0.0:* LISTEN 5840/nzbget tcp 0 0 0.0.0.0:37 0.0.0.0:* LISTEN 1418/inetd tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 15034/smbd tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 8208/httpd tcp 0 0 0.0.0.0:113 0.0.0.0:* LISTEN 1418/inetd tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 1418/inetd tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1423/sshd tcp 0 0 0.0.0.0:88 0.0.0.0:* LISTEN 1559/emhttp tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 15034/smbd tcp 0 0 0.0.0.0:3551 0.0.0.0:* LISTEN 1739/apcupsd udp 0 0 0.0.0.0:512 0.0.0.0:* 1418/inetd udp 0 0 192.168.0.16:137 0.0.0.0:* 15036/nmbd udp 0 0 0.0.0.0:137 0.0.0.0:* 15036/nmbd udp 0 0 192.168.0.16:138 0.0.0.0:* 15036/nmbd udp 0 0 0.0.0.0:138 0.0.0.0:* 15036/nmbd udp 0 0 0.0.0.0:37 0.0.0.0:* 1418/inetd udp 0 0 192.168.0.16:123 0.0.0.0:* 1435/ntpd udp 0 0 127.0.0.1:123 0.0.0.0:* 1435/ntpd udp 0 0 0.0.0.0:123 0.0.0.0:* 1435/ntpd
October 7, 201015 yr Author root@192:/mnt# netstat -n -l -p Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:2049 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:37 0.0.0.0:* LISTEN 1359/inetd tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 1385/smbd tcp 0 0 0.0.0.0:55628 0.0.0.0:* LISTEN 1349/rpc.statd tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1345/rpc.portmap tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 5728/awk tcp 0 0 0.0.0.0:41360 0.0.0.0:* LISTEN 2452/rpc.mountd tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1391/emhttp tcp 0 0 0.0.0.0:59956 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 1359/inetd tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 1359/inetd tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 1385/smbd udp 0 0 0.0.0.0:2049 0.0.0.0:* - udp 0 0 192.168.0.193:137 0.0.0.0:* 1383/nmbd udp 0 0 0.0.0.0:137 0.0.0.0:* 1383/nmbd udp 0 0 192.168.0.193:138 0.0.0.0:* 1383/nmbd udp 0 0 0.0.0.0:138 0.0.0.0:* 1383/nmbd udp 0 0 0.0.0.0:37 0.0.0.0:* 1359/inetd udp 0 0 0.0.0.0:677 0.0.0.0:* 1349/rpc.statd udp 0 0 0.0.0.0:37816 0.0.0.0:* 1349/rpc.statd udp 0 0 0.0.0.0:58720 0.0.0.0:* - udp 0 0 0.0.0.0:51563 0.0.0.0:* 2452/rpc.mountd udp 0 0 0.0.0.0:111 0.0.0.0:* 1345/rpc.portmap udp 0 0 192.168.0.193:123 0.0.0.0:* 1335/ntpd udp 0 0 127.0.0.1:123 0.0.0.0:* 1335/ntpd udp 0 0 0.0.0.0:123 0.0.0.0:* 1335/ntpd Active UNIX domain sockets (only servers) Proto RefCnt Flags Type State I-Node PID/Program name Path unix 2 [ ACC ] STREAM LISTENING 4196 1369/acpid /var/run/acpid.socket root@192:/mnt# lsof -i :2049 root@192:/mnt# lsof -i :59956 root@192:/mnt# lsof -i :58720 root@192:/mnt# 2 of 3 are explained. 2 new are exposed. What process is "-"?
Archived
This topic is now archived and is closed to further replies.