Re: Anything suspicious?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



thanks!... I did try it and it showed dhcpd... I just installed this bugger
but just forgot =)
----- Original Message ----- 
From: "Stephen Carville" <carville@xxxxxxx>
To: "Discussion of Red Hat Linux 9 (Shrike)" <shrike-list@xxxxxxxxxx>
Sent: Friday, April 15, 2005 6:12 PM
Subject: Re: Anything suspicious?


> Power wrote:
> > [root@delllinux root]# netstat -an Active Internet connections
> > (servers and established) Proto Recv-Q Send-Q Local Address
> > Foreign Address         State tcp        0      0 0.0.0.0:21
> > 0.0.0.0:*               LISTEN tcp        0      0 0.0.0.0:22
> > 0.0.0.0:*               LISTEN tcp        0      0 192.168.1.1:22
> > 192.168.1.8:1120 ESTABLISHED udp        0      0 0.0.0.0:67
> > 0.0.0.0:* udp    65472      0 0.0.0.0:68              0.0.0.0:*
> >  <<< THESE TWO LINES raw        0      0 0.0.0.0:1
> > 0.0.0.0:*               7 <<< Active UNIX domain sockets (servers and
> > established) Proto RefCnt Flags       Type       State         I-Node
> > Path unix  7      [ ]         DGRAM                    914
> > /dev/log unix  2      [ ]         DGRAM                    36162 unix
> > 2      [ ]         DGRAM                    9529 unix  2      [ ]
> > DGRAM                    1051 unix  2      [ ]         DGRAM
> > 1011 unix  2      [ ]         DGRAM                    930
> >
> > Can anyone tell me if the last 2 lines of hte Active Internet
> > connections seem fishy?  I've been monitoring connections before and
> > I have never seen those 2 lines before.
>
> As root, try it with the -p option (netstat -nap) to see the local
> process that owns the socket.
>
> -- 
> Stephen Carville -- polluting the ranks of skeptics since 1995.
> ---------------------------------------------------------------
> Government is actually the worst failure of civilized man. There has
> never been a really good one, and even those that are most tolerable are
> arbitrary, cruel, grasping and unintelligent.
>              -- H. L. Mencken
>
> -- 
> Shrike-list mailing list
> Shrike-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/shrike-list
>

-- 
Shrike-list mailing list
Shrike-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/shrike-list

[Index of Archives]     [Fedora Users]     [Centos Users]     [Kernel Development]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat Phoebe Beta]     [Yosemite Forum]     [Fedora Discussion]     [Gimp]     [Stuff]     [Yosemite News]

  Powered by Linux