OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Odd / random UDP ports listening on my machine?
From: Alexandre Carmel-Veilleux (sarumanMONDO-LIVE.COM)
Date: Mon Nov 20 2000 - 15:55:48 CST

On Mon, Nov 20, 2000 at 10:26:44AM -0500, Max Gribov wrote:
>
> i have the same thing on my machine, and i connected to the port with
> netcat, and after tailing messages and throwing random commands at the
> port, i get these kinds of thing (from syslog):
>
> mordor kernel: svc: short len -1, dropping request
> mordor last message repeated 6 times
> mordor kernel: svc: short len 0, dropping request
>
> i dont know what svc is however... anyone care to clarify?

        It's part of Linux' RPC implementation, your kernel has "RPC_PARANOIA"
defined and it's logging strange/illegal messages... Like the one you
generated. You can lookup /usr/src/linux/net/sunrpc/svc.c for the juicy
details. I have no clue why it's called "svc".

Saruman