Subject: Re: Open ports on Suse linux 2007-10-05 - By -not available-
Back
It looks like RPC stuff. What does 'rpcinfo -p' return?
On Fri, Oct 05, 2007 at 02:46:19PM -0400, Craig Ward wrote:
> Alexei,
>
> I ran the commands you suggested and was able to find the one processes
> owner. The other one though came up with the folling:
>
> oraprd:~ # fuser 32774/tcp
> here: 32774
>
> As there is no process id number, I don't know how to track this any
> further. I would appreciate any other suggestions.
>
> Thanks
> Craig E. Ward
> 803-817-6438
>
> -- --Original Message-- --
> From: Alexei_Roudnev [mailto:Alexei_Roudnev@(protected)]
> Sent: Friday, October 05, 2007 12:03 AM
> To: Craig Ward; suse-oracle@(protected)
> Subject: Re: [suse-oracle] Open ports on Suse linux
>
> fuser <port_number>/tcp is your friend.
>
> It will show process, which keeps port open (but better run, first
>
> netstat -an | grep tcp | grep LISTEN
>
> to see if port is really open.)
>
> -- -- Original Message -- --
> From: "Craig Ward" <cward@(protected)>
> To: <suse-oracle@(protected)>
> Sent: Thursday, October 04, 2007 11:04 AM
> Subject: [suse-oracle] Open ports on Suse linux
>
>
> > SuSE guru's -
> >
> > I have a question I hope will be easily answered. On our production
> > server,
> > SLES-9 (See http://LES-9.ora-code.com), we have two ports that are open and we can't find out what is
> > opening them, or why. I also have been unable to find how to close the
> > ports.
> >
> > I ran nmap on them and got the following:
> >
> > oraprd:~ # nmap -p 12345 oraprd
> >
> > Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2007-10-04 14:05
> > EDT
> > Interesting ports on oraprd.raclocal.com (10.119.8.48):
> > PORT STATE SERVICE
> > 12345/tcp open NetBus
> >
> > Nmap run completed -- 1 IP address (1 host up) scanned in 0.330 seconds
> > oraprd:~ # nmap -p 32774 oraprd
> >
> > Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2007-10-04 14:05
> > EDT
> > Interesting ports on oraprd.raclocal.com (10.119.8.48):
> > PORT STATE SERVICE
> > 32774/tcp open sometimes-rpc11
> >
> > Nmap run completed -- 1 IP address (1 host up) scanned in 0.330 seconds
> >
> > I would appreciate any help or insights as to what I can do to either
> > identify why they are open or how to close them.
> >
> > Thanks
> > Craig Ward
--
To unsubscribe, email: suse-oracle-unsubscribe@(protected)
For additional commands, email: suse-oracle-help@(protected)
Please see http://www.suse.com/oracle/ before posting
|
|
