Dziwne porty/usługi...

[Jarosław Kamper]

[jack at pldworkstation jack]$ nmap -I 192.168.0.98 -p 1025,2049

Starting nmap V. 2.54BETA29 ( www.insecure.org/nmap/ )
Interesting ports on pldworkstation.jack.eu.org (192.168.0.98):
Port       State       Service                 Owner
1025/tcp   open        listen                  root
2049/tcp   open        nfs                     root

A w logach:

Mar  7 03:26:09 pldworkstation kernel: nfsd: connect from unprivileged
port: 192.168.0.98:4401
Mar  7 03:26:09 pldworkstation kernel: svc: server socket destroy
delayed (sk_inuse: 1)

Krótko: WTF?!

[jack at pldworkstation jack]$ sudo fuser -n tcp 2049
[jack at pldworkstation jack]$ sudo fuser -n tcp 1025
1025/tcp:             1375
[jack at pldworkstation jack]$ sudo ps auxwww|grep 1375
root      1375  0.0  0.2  1540  708 ?        S    Mar06   0:00
rpc.mountd

Z tego co wiem, portmap chodzi na 111. To jakiś lewy nfsd/rpc czy w
innej wersji (v3) ? Uświadom mnie ktoś, please!

A na drugiej maszynie, fuser całkowicie nic nie pokazuje.
-- 
Jarosław Kamper	  	         jack at jack.eu.org	           UIN: 35713516
http://jack.eu.org		                  Registered Linux User # 165846
Jeżeli chcesz pomóc to rób tylko tyle ile możesz. Robienie cudów pozostaw innym 
                 kloczek at pld-devel-pl at pld.org.pl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 254 bytes
Desc: not available
URL: </mailman/pipermail/pld-devel-pl/attachments/20020307/467799e6/attachment.sig>