[CentOS] process identification

[Richard Ray]

>> -----Original Message-----
>> From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of
>> kqt4at5v at gmail.com
>> Sent: viernes, 19 de septiembre de 2014 11:15
>> To: CentOS mailing list
>> Subject: Re: [CentOS] process identification
>>
>> On Fri, 19 Sep 2014, Reindl Harald wrote:
>>
>>>
>>> Am 19.09.2014 um 15:58 schrieb kqt4at5v at gmail.com:
>>>> On Fri, 19 Sep 2014, Reindl Harald wrote:
>>>>
>>>>> Am 19.09.2014 um 15:45 schrieb kqt4at5v at gmail.com:
>>>>>> I am running CentOS 6.5. I know this is not a CentOS specific problem.
>>>>>> Netstat shows several open ports and no pid.
>>>>>>
>>>>>> tcp    0  0 *:48720                 *:*                 LISTEN      - tcp    0  0
>> *:43422
>>>>>> *:*                 LISTEN      -
>>>>>> udp    0  0 *:50216                 *:*
>>>>>
>>>>> alias netstat='/bin/netstat --numeric-hosts --numeric-ports --notrim --programs -u -
>> t'
>>>>>        /bin/netstat
>>>>>
>>>>> [root at openvas:~]$ /bin/netstat --numeric-hosts --numeric-ports --notrim --programs -
>> u -t -l
>>>>> Aktive Internetverbindungen (Nur Server)
>>>>> Proto Recv-Q Send-Q Local Address               Foreign Address             State
>> PID/Program name
>>>>> tcp        0      0 127.0.0.1:9390              0.0.0.0:*                   LISTEN
>> 5454/openvasmd
>>>>> tcp        0      0 127.0.0.1:9391              0.0.0.0:*                   LISTEN
>> 5473/openvassd
>>>>> tcp        0      0 0.0.0.0:443                 0.0.0.0:*                   LISTEN
>> 5438/gsad
>>>>> tcp        0      0 0.0.0.0:10022               0.0.0.0:*                   LISTEN
>> 1177/sshd
>>>>
>>>> This netstat show exactly the same
>>>
>>> boah then call it as root, for a unprivileged user it shows only
>>> executeable and PID of own processes for good reasons
>>>
>>>> Lsof does not show these ports
>>>
>>> because you just have no permissions
>>>
>>>
>>
>> My bad I should have said. My original commands were
>> sudo netstat -tulpn | less
>> sudo lsof | less
>> I have several CentOS 6.5 machines and only one shows these odd ports.
>> I have also run chkrootkit and used clamscan to check filesystems.
>> It may be harmless but my curiosity is killing me.
>>

On Fri, 19 Sep 2014, Francisco Puente wrote:

> lsof -i -P | grep LISTEN
>

Returns none of the questionable ports