running nmap lately on my host revealed some open ports which I couldn't really identify:
1) port 1987 with service named something like "trsrb-p1" (don't remember the name exactly, since the open port vanished after a while)
2) port 1024 with service "unknown" If you find "unknown" ports open, try "netstat -anp" to find out. Maybe this should be included in the FAQ? I coudln't find any hints in /etc/inetd.conf nor in /etc/services. Forget /etc/services for "real" information. It is just a lookup table for names common services, but ports > 1024 can be opened by any user and any application, and therefore the information is quite useless. Especially because the port range from 1024 .. 4999 is used for client connections (for 2.2.x kernels, 2.4.x use >32000)
hth Markus -- _____________________________ /"\ Markus Gaugusch ICQ 11374583 \ / ASCII Ribbon Campaign markus@gaugusch.dhs.org X Against HTML Mail / \