Netstat (1.04)
From NAS-Central Buffalo - The Linkstation Wiki
(Difference between revisions)
m |
|||
| Line 42: | Line 42: | ||
* <tt>tcp/8873</tt>: rsfwds run by inetd | * <tt>tcp/8873</tt>: rsfwds run by inetd | ||
** will reject any connections, like rsync | ** will reject any connections, like rsync | ||
| - | ** Unknown. There is also a rsfwdc executable in /usr/sbin. The "c" probably stands for client and the "s" probably stands for server. Running strings on the executables shows calls to functions in libssl. And it looks like the client might call /usr/bin/rsync. The client also contains the string "Usage: rsfwdc REMOTE_HOST REMOTE_PORT [RSYNC_PARAMETERS...]" Maybe it's an encrypted rsync used by the TeraStation's backup feature? | + | ** Unknown. There is also a rsfwdc executable in /usr/sbin. The "c" probably stands for client and the "s" probably stands for server. Running "strings" on the executables shows calls to functions in libssl. And it looks like the client might call /usr/bin/rsync. The client also contains the string "Usage: rsfwdc REMOTE_HOST REMOTE_PORT [RSYNC_PARAMETERS...]" Maybe it's an encrypted version of rsync used by the TeraStation's backup feature? |
* <tt>tcp/22939</tt>, <tt>udp/22939</tt>: come from lsprcvd | * <tt>tcp/22939</tt>, <tt>udp/22939</tt>: come from lsprcvd | ||
** no idea | ** no idea | ||
* <tt>udp/22936</tt>: is bound by ls_servd | * <tt>udp/22936</tt>: is bound by ls_servd | ||
** no idea | ** no idea | ||
Revision as of 04:56, 25 February 2006
netstat tells you about the running services:
root@HD-HTGL113:~# netstat -a Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:printer *:* LISTEN tcp 0 0 *:afpovertcp *:* LISTEN tcp 0 0 *:8873 *:* LISTEN tcp 0 0 *:rsync *:* LISTEN tcp 0 0 *:netbios-ssn *:* LISTEN tcp 0 0 *:www *:* LISTEN tcp 0 0 *:ssh *:* LISTEN tcp 0 0 *:22939 *:* LISTEN udp 0 0 localhost.localdom:1025 *:* udp 0 0 HD-HTGL113:netbios-ns *:* udp 0 0 *:netbios-ns *:* udp 0 0 HD-HTGL113:netbios-dgm *:* udp 0 0 *:netbios-dgm *:* udp 0 0 *:22936 *:* udp 0 0 *:22939 *:* udp 0 0 *:bootpc *:* Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node Path unix 2 [ ACC ] STREAM LISTENING 307 /var/run/lprng unix 10 [ ] DGRAM 208 /dev/log unix 2 [ ] DGRAM 1217 unix 2 [ ] DGRAM 894 unix 2 [ ] DGRAM 773 unix 2 [ ] DGRAM 399 unix 2 [ ] DGRAM 292 unix 2 [ ] DGRAM 290 unix 2 [ ] DGRAM 269 unix 2 [ ] DGRAM 260
This are nothing special: tcp/printer (printer, lpd), tcp/afpovertcp (appletalk), tcp/netbios-ssn, udp/netbios-ns, udp/netbios-dgm (samba, windows file sharing), tcp/www (apache), udp/bootpc (DHCP-client).
More interesting:
- tcp/rsync: rsync run by inetd
- rsync server, exporting all shares
- but will reject any connections from everyone, due to /etc/hosts.deny
- used for the disk backup feature
- tcp/8873: rsfwds run by inetd
- will reject any connections, like rsync
- Unknown. There is also a rsfwdc executable in /usr/sbin. The "c" probably stands for client and the "s" probably stands for server. Running "strings" on the executables shows calls to functions in libssl. And it looks like the client might call /usr/bin/rsync. The client also contains the string "Usage: rsfwdc REMOTE_HOST REMOTE_PORT [RSYNC_PARAMETERS...]" Maybe it's an encrypted version of rsync used by the TeraStation's backup feature?
- tcp/22939, udp/22939: come from lsprcvd
- no idea
- udp/22936: is bound by ls_servd
- no idea
