On Fri, 19 Sep 2014, Ulf Volmer wrote:
> On 09/19/2014 04:15 PM, Richard Ray wrote:
>> On Fri, 19 Sep 2014, Ulf Volmer wrote:
>
>>> This looks like these port are opened by kernel, not by a process, for
>>> example like nfs.
>>>
>>
>> How can I know for sure?
>
> For NFS it is simple, use 'rpcinfo -p'.
>
Great that shows 2 of them
$ sudo rpcinfo -p
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 55364 status
100024 1 tcp 38528 status
100021 1 udp 50216 nlockmgr
100021 3 udp 50216 nlockmgr
100021 4 udp 50216 nlockmgr
100021 1 tcp 48720 nlockmgr
100021 3 tcp 48720 nlockmgr
100021 4 tcp 48720 nlockmgr