[Snort-users] Port open question

Jon Bentley jon at ...1741...
Wed Apr 4 12:50:48 EDT 2001


http://www.sans.org/y2k/013000-1200.htm

----- Original Message -----
From: <Kevin.Brown at ...1022...>
To: <snort-users at lists.sourceforge.net>
Sent: Wednesday, April 04, 2001 12:04 PM
Subject: [Snort-users] Port open question


> I'm trying to figure out what program is running on my Sparc (Solaris 7)
and
> using port 2766.  I did a search of the rules and found:
>
> EXPLOIT nlps x86 solaris overflow
>
> I tried using `netstat -a` to see if port 2766 was listed there, but no
> luck.  This port is only open on one of the sparcs that I control and
can't
> figure out why.
>
> I can telnet to the port (e.g. telnet server 2766) and it opens a
connection
> then just sits there.  Any ideas on what it could be?
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>





More information about the Snort-users mailing list