Re: Connection to Port 21026, tethereal to analyze
From: Alexander Runge (arunge_at_antispamprefix.nexgo.de)
Date: 09/30/03
- Next message: Timur: "Re: Rocket Raid 1542 (chip HPT347) + Suse 8.2"
- Previous message: Scott Vetter: "Re: User gets bumped off"
- In reply to: Sally Shears: "Connection to Port 21026, tethereal to analyze"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Tue, 30 Sep 2003 17:52:49 +0200
Sally Shears wrote:
> I see a continuous (or at least regular) connection from an unknown
> host to post 21026 on my machine.
>
> What is port 21026? Should I worry about this?
>
> Also, I tried to start tethereal to look at the traffic on this port. I
> typed tehtereal as root. The result is a process I cannot stop. How can
> I stop this process? It's status is "D" for uninterruptible sleep.
>
> USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
> root 29755 0.0 1.7 8168 4484 pts/1 D 17:44 0:00 tethereal
>
> Finally, what would be the right ethereal command to look at this
> network traffic?
>
> -- Sally
>
> p.s. SuSE 8.1, a server, command-line only.
>
Try "tcpdump port 21026"
Check with "netstat -anp | grep 21026" if you have any connections using
this port. The p-Parameter will list the application that is bound to this
port, if any.
Alex!!!
- Next message: Timur: "Re: Rocket Raid 1542 (chip HPT347) + Suse 8.2"
- Previous message: Scott Vetter: "Re: User gets bumped off"
- In reply to: Sally Shears: "Connection to Port 21026, tethereal to analyze"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|