[nflug] port 56202

[Darin Perusich]

Do you have any nfs mounts on the system? I just took a quick look on a 
system I'm setting and I had one of those rogue open ports. After 
unmounting an nfs mount it went away.

Justin Bennett wrote:
> It's pretty lean to begin with, all that junk is turned off, I thought 
> it might be my Raid Monitor, but nope.  I've gone through the services 
> with no luck.
> 
> 
> Darin Perusich wrote:
>> You might want to start stopping services individually to figure this 
>> out. I'd start with portmap as it tends to grab arbitrary ports.
>>
>> Justin Bennett wrote:
>>> Does anyone know what port 56202 maybe?
>>>
>>>    I have an external connected machine (Dual Homed, LAN and 
>>> Internet) which has this port open and I'm not sure what it is. It's 
>>> firewalled from the outside world (doesn't even show using an nmap 
>>> portscan), however I'd like to close it anyways. If I do a netstat it 
>>> doesn't tell me what the process is.
>>>
>>> Proto Recv-Q Send-Q Local Address               Foreign 
>>> Address             State       PID/Program name
>>> tcp        0      0 0.0.0.0:56202               
>>> 0.0.0.0:*                   LISTEN      -    It will answer if I 
>>> telnet to it on the loopback or LAN interface but not on the external 
>>> interface.
>>>
>>> telnet localhost 56202
>>> Trying 127.0.0.1...
>>> Connected to localhost (127.0.0.1).
>>> Escape character is '^]'.
>>>
>>>
>>> Connection closed by foreign host.
>>>         Thanks
>>> Justin
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> nflug mailing list
>>> nflug at nflug.org
>>> http://www.nflug.org/mailman/listinfo/nflug
>>
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug

-- 
Darin Perusich
Unix Systems Administrator
Cognigen Corporation
395 Youngs Rd.
Williamsville, NY 14221
Phone: 716-633-3463
Email: darinper at cognigencorp.com
_______________________________________________
nflug mailing list
nflug at nflug.org
http://www.nflug.org/mailman/listinfo/nflug