Unknown port in netstat output.

From: seldane99 (_at_yahoo.com)
Date: 08/16/04 

Date: Mon, 16 Aug 2004 10:44:22 -0700

Hi,

I am a bit puzzled by this port that keeps showing up on my RH systems.
I have ensured that it does not belong to any of the know servers.
Besides it changes on every boot and it is never the same as that of any
know/listed service in the /etc/service

I reintalled the system and its here again. Now it must belong to
something legitimate. Here is the netstat -a output. The ports are 877,
878. As you can see I have a very minimal configuration (I usually do)
and that is why I have been troubled by these additional ports showing up.

--- start ---
[root@localhost root]# netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:ftp *:* LISTEN
tcp 0 0 *:telnet *:* LISTEN
tcp 0 0 10.25.25.20:telnet 10.25.25.12:4873
TIME_WAIT
tcp 0 138 10.25.25.20:telnet 10.25.25.12:4875
ESTABLISHED
udp 0 0 *:877 *:*
udp 0 0 *:878 *:*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 1986 /dev/gpmctl
unix 2 [ ACC ] STREAM LISTENING 3719
/tmp/orbit-root/linc-97
2-0-13473b2a7994
unix 7 [ ] DGRAM 1804 /dev/log
unix 2 [ ] DGRAM 3718
unix 2 [ ] DGRAM 2006
unix 2 [ ] DGRAM 1989
unix 2 [ ] DGRAM 1944
unix 2 [ ] DGRAM 1812
[root@localhost root]#
--- end ---

Thahks,
Sunny

Relevant Pages

  • Re: Listening ports.
    ... You would need a process viewer to tie the ports to the processes. ... I would only worry about established connections, ... Port 1071 is showing a recently closed ... connecting to servers. ...
    (microsoft.public.security)
  • Re: Unknown port in netstat output.
    ... > I have ensured that it does not belong to any of the know servers. ... Since the ports are numerically less than 1024, ... HTH. ...
    (linux.redhat)
  • Re: Visa PCI Firewall Requirements and Windows Networks
    ... GP without the risk of open ports or a DC in the DMZ. ... Outbound access should be minimized but if windows update is your ... alternative tools on trusted servers to patch your machine. ... > behind the second firewall. ...
    (Focus-Microsoft)
  • Re: Win32 The RPC server is unavailable
    ... correct DNS servers and the port are unblocked. ... WMI errors the seem to be RPC related. ... All od the port are unblocked between the servers and the ... Usually RPC errors are due to name resolution or blocked ports. ...
    (microsoft.public.windows.server.networking)
  • RE: Slow user logon on Terminal server after migration to Windows 2003
    ... The Terminal Servers are 2000 or 2003. ... "Inside the firewall zone" means that the Citrix Servers have a firewall ... available RPC ports? ...
    (microsoft.public.windows.server.active_directory)