port 804 open??

This is a discussion on port 804 open?? within the Linux Security forums, part of the System Security and Security Related category; hi does anyone know to which application port 804 belongs? it's not an xinetd service. grc.com & other ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-26-2005
Nikolai Försterling
 
Posts: n/a
Default port 804 open??

hi
does anyone know to which application port 804 belongs?
it's not an xinetd service.
grc.com & other info's like google don't know about this port, but on my
linux machine, it's open(!?)
a trojan doesn't seems probably to me, though
i ran chkrootkit.

thanks in advance for hints
--
lg
niko
icq: 129022192
___________________________________________
--
Der Vorteil der Klugheit liegt darin, daß man sich dumm stellen kann.
Das Gegenteil ist schon schwieriger
(Kurt Tucholsky)

Reply With Quote
  #2 (permalink)  
Old 07-26-2005
ynotssor
 
Posts: n/a
Default Re: port 804 open??

"Nikolai Försterling" <chat.foster@web.de> wrote in message
news:42e65b2d$0$18009$9b4e6d93@newsread4.arcor-online.net...

> does anyone know to which application port 804 belongs?


As root:
netstat -anp | grep ":804"
or
lsof -i :804

Reply With Quote
  #3 (permalink)  
Old 07-26-2005
Mike
 
Posts: n/a
Default Re: port 804 open??

Nikolai Försterling wrote:
> hi
> does anyone know to which application port 804 belongs?
> it's not an xinetd service.
> grc.com & other info's like google don't know about this port, but on my
> linux machine, it's open(!?)
> a trojan doesn't seems probably to me, though
> i ran chkrootkit.
>
> thanks in advance for hints

try netstat -pl
Reply With Quote
  #4 (permalink)  
Old 07-27-2005
Nikolai Försterling
 
Posts: n/a
Default found out

it's been the "file access monitor" fam, which consumed too much performance
anyway, so i deactivated it.
but i donn't know why it listened on the external device?
loopback/localhost should suffer for that kind of service, shouldn't it?
--
lg niko
icq# 129022192
Reply With Quote
  #5 (permalink)  
Old 08-02-2005
larstr@no-spam.colargol.tihlde.org
 
Posts: n/a
Default Re: port 804 open??

In comp.security.firewalls Nikolai Försterling <chat.foster@web.de> wrote:
: does anyone know to which application port 804 belongs?

netstat -anp|grep ":804 "

In the right most column you will get pid/program name.

ps -x <pid number>

Will often give you the full path of the program and also parameters.

Good luck!

Lars
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 04:44 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0