OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Chris Faulhaber (jedgarfxp.org)
Date: Mon Mar 05 2001 - 12:15:05 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Mon, Mar 05, 2001 at 10:20:11AM -0800, dce wrote:
    > Hello,
    >
    > I have noticed the following ports open on my FreeBSD 4.2-STABLE machine
    >
    > 31337/tcp open Elite
    > 6667/tcp open irc
    >
    >
    > I have also noticed these open after CVSuping from 4.0-RELEASE to
    > 4.2-STABLE... Is this normal? Has a rootkit been installed? Any
    > information provided is greatly appreciated.

    First step would be to find out what programs have the above ports
    open (hint: use sockstat)... 

    -- 
Chris D. Faulhaber - jedgarfxp.org - jedgarFreeBSD.org
--------------------------------------------------------
FreeBSD: The Power To Serve   -   http://www.FreeBSD.org

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: FreeBSD: The Power To Serve

    iEYEARECAAYFAjqj16kACgkQObaG4P6BelBW7QCfUrlEEwlfDHtS8gDTSYMXe0oc gBwAn1qTqXwtOGAbpnh6n8HOPWy1RfQd =6Pa0 -----END PGP SIGNATURE-----

    To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message