OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Crist J. Clark (cristjcearthlink.net)
Date: Wed Oct 10 2001 - 04:47:39 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Oct 10, 2001 at 09:22:54AM +1000, Jas Amidzic wrote:
    >
    >
    > BIND 9.1.3 besides listening to TCP port 53 also appear to be listening on UDP
    > ports 32774 and 32775. Quick nmap scan reviled this ports identifying them as
    > 'sometimes-rpc12' and 'sometimes-rpc14'. However this ports apart to be
    > associated with BIND, once BIND is stooped 'netstat' does not list those ports
    > as being in the listening state. Pleas not that all RPC services on the box are
    > disabled.
    >
    > I am not sure why this ports are being put in listening state by BIND. Any
    > ideas ...?

    It just made a query or two to some DNS servers and is waiting for a
    response? Or does it keep these two open for long periods? 

    -- 
Crist J. Clark                           cjclarkalum.mit.edu
                                         cjclarkjhu.edu
                                         cjcfreebsd.org