netstat cannot identify rpc services presented by the kernel. Check rpcinfo -p. This should account for the unidentified ports. &:-) 'Twas 12:38 Yesterday when Martin Geigl spake thus:
Hi all,
had an attack attempt a few days ago via the kstatd, but it seemed to me it wasn't successfull. I did an netstat -p to check and got the following:
(Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.)
But I was root! My question now is, is this a standard comment of netstat or is there a "hidden" program running, which even root can't see (e.g. some trojan horse)?
Thanks in Advance Martin
-- Deadbat Dustbian LuSE Hackware Also-randrake Line Ucks Lean Ucks Loon Icks Lynne Nicks free, dim (two chews)