open ports solaris 8


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers open ports solaris 8
# 1  
Old 12-01-2008
open ports solaris 8

Hello,

I have a number of Solaris 8 Sun servers that have open ports that I cannot identify. I see some with 1012-1020 (which are reserved ports according to the IANA. Lsof does not identify these. One server has all these on and one server just has 1017.

*.1023 Idle
*.1022 Idle
*.1021 Idle
*.1020 Idle
*.1019 Idle
*.1018 Idle
*.1017 Idle
*.1016 Idle
*.1015 Idle
*.1014 Idle
*.1013 Idle

I also have Disksuite running on 2 of the servers and I see strange ports opened by inetd. Some research indicates that this could be from a Disksuite metatool, but it isn't on all the servers.

# *lsof -i :36724*
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
inetd 247 root 13u IPv4 0x30004c18638 0t0 TCP *:36724 (LISTEN)

# *lsof -i :36725*
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
inetd 247 root 14u IPv4 0x30004c184b8 0t0 TCP *:36725 (LISTEN)

# *lsof -i :50689*

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
inetd 210 root 13u IPv4 0x30001a2be38 0t0 TCP *:50689 (LISTEN)

# *lsof -i :50690*
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
inetd 210 root 14u IPv4 0x30001a2b3b8 0t0 TCP *:50690 (LISTEN)

But then I have another server which isn't running Disksuite that has a similar port open.

# *lsof -i :32769*
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
smcboot 265 root 3u IPv4 0x300001470b0 0t0 TCP *:32769 (LISTEN)

Any ideas please?

Thanks
# 2  
Old 12-02-2008
I rebooted one server and all the 1013-1023 ports closed. I did notice on one server that port 1017 indicates it is BOUND in netstat but I cannot find (using LSOF) what that would be bound to.

Any suggestions please?

Thanks
# 3  
Old 12-02-2008
For the ports in my inquiry 36724/36725 and 50689/50690, I commented out the entries in inetd.conf that the disksuite install set up for Metatool GUI and HUP inetd. Those ports went away. I use the command line and don't need it.

---
100229/1 tli rpc/tcp wait root /usr/sbin/rpc.metad rpc.metad

100230/1 tli rpc/tcp wait root /usr/sbin/rpc.metamhd rpc.metamhd

Now if anyone knows about those 1017 BOUND port, that would be great.

Thanks
# 4  
Old 12-03-2008
As I said in my prior post, I rebooted the server and they shut down but this morning I looked and they were all open again. They are not listed in /etc/services. Any suggestions or tools would be appreciated.

Thank you.

*.1023 Idle
*.1022 Idle
*.1021 Idle
*.1020 Idle
*.1019 Idle
*.1018 Idle
*.1017 Idle
*.1016 Idle
*.1015 Idle
*.1014 Idle
*.1013 Idle
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. IP Networking

Open/close of ports

Hi, I have read some forum theads about the open and close ports. some points are clear and it is not working on my machine or something am i missing? I have commented out a port /etc/services, one application uses then when i use the telnet <hostname> <port_blocked> it shows connected..... (1 Reply)
Discussion started by: balamv
1 Replies

2. UNIX for Dummies Questions & Answers

open ports and services

just a quick question: a. whats the simplest command to check open port and the corresponding services? example: bash-2.05# netstat -an | grep LISTEN *.199 *.* 0 0 49152 0 LISTEN *.8989 *.* 0 0 49152 ... (1 Reply)
Discussion started by: lhareigh890
1 Replies

3. Solaris

Open ports in solaris 10

hi guys, may i know the exact steps to open a port in solaris.i have some rough idea - which is adding the port number in /etc/services. but i am not sure the correct conventions, steps or any other steps. kindly advise.thanks guys ! (1 Reply)
Discussion started by: cromohawk
1 Replies

4. Cybersecurity

Ports open on solaris/linux

Hi, I am trying to close all possible ports on my solaris and linux servers. I am stuck on the following ports on both Solaris 10 (local zone) and Linux (Suse) servers. Here is nmap output : PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 1720/tcp open H.323/Q.931... (6 Replies)
Discussion started by: manifesto
6 Replies

5. Solaris

open ports solaris 8

Hello, I have a number of Solaris 8 Sun servers that have open ports that I cannot identify. I see some with 1013-1023 (which are reserved ports according to the IANA. Lsof does not identify these. I rebooted the server and they went off, but this morning I saw they were all back on again. Any... (1 Reply)
Discussion started by: csgonan
1 Replies

6. AIX

Open Ports on System

Hi Every body, What is the command on AIX 5.2 that can be used to get all open ports? (2 Replies)
Discussion started by: aldowsary
2 Replies

7. Shell Programming and Scripting

Check open ports every ...

Hello, i need a script (bash type maybe?..), which would check open ports on 127.0.0.1 and then compare open ports with "registered/allowed" port list and try to kill the program who uses unregistered ports. It would be great that script would be started lets say every 5 or 10 minutes. You see i... (2 Replies)
Discussion started by: MorchiuS
2 Replies

8. UNIX for Advanced & Expert Users

determining open ports

hi all 1) how to determine available ports in a box (solaris) do i have to go for a netstat on all the ports? 2) how to block a particular port for a particular type of connection. Any help would be greatly appreciated Thanks (7 Replies)
Discussion started by: matrixmadhan
7 Replies

9. Linux

How To Open Ports in RedHat ?

how can i open ports i need in red hat server vs root access ? (7 Replies)
Discussion started by: Sirius
7 Replies

10. Cybersecurity

closing open ports

/* Linux Slackware */ Nmap shows the following ports open on the gateway. 21/tcp ftp 22/tcp ssh 23/tcp telnet 25/tcp smtp 37/tcp time 80/tcp http 113/tcp auth 515/tcp printer 587/tcp submission 1024/tcp kdm 6000/tcp x11 ------------------------------- i would like to close as... (10 Replies)
Discussion started by: LowOrderBit
10 Replies
Login or Register to Ask a Question