Re: [SLUG] port question

From: Eben King (eben01@verizon.net)
Date: Mon Aug 14 2006 - 14:12:50 EDT


On Mon, 14 Aug 2006, vern wrote:

> How do you tell which application is running on which port ? i don't
> remember how to find that.

as root:
netstat -A inet -a -p

> Reason of curiosity is I was looking at my logs from my home router and
> noticed alot of "hits" from a 'suspicious' ip address and has hit alot
> of different ports and I'm just wondering what they belong to. Feeling a
> little paranoia today i guess :-)

The assignments for ports with nothing running on them can be seen in
/etc/services. But really, you should have some sort of hardware NAT box at
least between you and the internet, and only allow access to those ports you
want the world to see. I only allow external connections to sshd and to
thttpd, and thttpd doesn't run on port 80.

-- 
-eben      QebWenE01R@vTerYizUonI.nOetP      http://royalty.no-ip.org:81
CAPRICORN:  The stars say you're an exciting and wonderful person... but
you know they're lying.  If I were you, I'd lock my doors and windows
and never never never never never leave my house again.  -- Weird Al
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS).  Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:01:16 EDT