Tom Emerson wrote:
netbios-ssn is port 139 -- to see this, do the netstat command with the switch "-an" instead of just "-a" [the "n" means "no names" or "numbers only"]
netstat -an does not reveal anything about port 139
You can also use "--udp" or "--inet" to show udp-only or "all" socket types respectively -- "I forgot..." the port 137 stuff shows up under UDP [though note in the /etc/services file that port 137 is defined identically for TCP and UDP style sockets]
vertigo:/home/fx # netstat -an --udp Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 0.0.0.0:111 0.0.0.0:* udp 0 0 0.0.0.0:631 0.0.0.0:* vertigo:/home/fx # netstat -an --inet Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:901 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:9925 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN <<<<<<<<<<<<<<< tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:6711 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN udp 0 0 0.0.0.0:111 0.0.0.0:* udp 0 0 0.0.0.0:631 0.0.0.0:*
To find out [definitavely] what "process" has the port opend, we turn to another command: lsof [list Open Files], with the "-i" switch [show IP related files only -- the command "man lsof" gives full details] [note also you should do this as root]
vertigo:/home/fx # lsof -n -i :139 -i :137 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME smbd 5922 root 10u IPv4 42845 TCP *:netbios-ssn (LISTEN) Something else: if I stop smbd with rcsmb stop, it stops all right. But rcnmb stop, followed by rcnmb status shows it is still running. Why? Plus, I was advised to check my SuSEfirewall2.conf file, and saw that port 139 was not explicitly open, and that broadcasts were not allowed. I duly corrected that, but still no luck. This is turning into private tuition :-) Thanks a lot fx -- ______________________ Courtesy of SuSE Linux nibz.org