RE: [SLE] Strange ports on my system

Hi again, You can also try 'netcat -L -p 18300' to listen to this port and get info on what is trying to connect there. You might see what protocol is used and you can use that to track down information. The -L option sets it up to listen continuously. Jostein

===== Original Message From Praise ===== Hi all!

I have just run netstat -na and I have noticed that I have port 18300 (tcp) open. I have run fuser as root, but without output. What is this port? Any Idea? A trojan?

I am wondering what is it port 1 (raw). Please tell me something about that too.

Here it is the output of netstat -na:

Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:901 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:139 0.0.0.0:* LISTEN tcp 0 0 192.168.0.3:139 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:7741 0.0.0.0:* LISTEN tcp 0 0 192.168.0.3:6000 192.168.0.1:2813 ESTABLISHED tcp 0 0 192.168.0.3:6000 192.168.0.1:1025 ESTABLISHED tcp 0 0 192.168.0.3:1333 192.168.0.1:139 ESTABLISHED tcp 0 0 192.168.0.3:1022 212.171.48.156:22 ESTABLISHED tcp 0 0 192.168.0.3:1023 192.168.0.1:22 ESTABLISHED tcp 0 0 :::18300 :::* LISTEN udp 0 0 192.168.0.3:137 0.0.0.0:* udp 0 0 0.0.0.0:137 0.0.0.0:* udp 0 0 192.168.0.3:138 0.0.0.0:* udp 0 0 0.0.0.0:138 0.0.0.0:* udp 0 0 0.0.0.0:7741 0.0.0.0:* raw 0 0 0.0.0.0:1 0.0.0.0:*

port 7741 is lisa.

Thanks in advance, Praise

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com