Strange daemons hanging around...

[Letalis]

When I ran nmap on my own box earlier today it showed these:
1650/tcp open nkd
1651/tcp open shiva_confsrvr
And i cant find any processes with these names. What are they?

[Craig McPherson]

I see questions like this a lot. Everybody take note of this trick, because you can use it to find out what proccess on your machine is bound to a particular port. It's very useful.

# lsof -i TCP:80

That command (the # is a root prompt, not part of the command) will tell you what process on your machine is bound to TCP port 80. On my machine, it yields this:

apache 24500 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24501 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24502 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24503 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24504 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24505 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24506 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24507 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24508 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24509 root 19u IPv4 141701 TCP *:http (LISTEN)
apache 24510 root 19u IPv4 141701 TCP *:http (LISTEN)

That shows me that about 8 Apache processes are bound to port 80 on my machine, and also gives me the PIDs of them so I can find out more about them if I want.

You can leave out the TCP part and just use the port number after a colon (the colon is MANDATORY to specify that it's a port number).

So for your question, you can do "lsof -i :1650" to find out what program on your machine is bound to that port.

I'm going to post a more detailed summary of this process in the "HOW I DID IT" forum in just a minute because I think a lot of people would like to know.

------------------
http://users.ipa.net/~cmcpher/paminv.gif DEBIAN (http://www.debian.org/) http://users.ipa.net/~cmcpher/paminv.gif
It turns girls into statues!

[This message has been edited by Craig McPherson (edited 13 January 2001).]

[Letalis]

Id guess that utility is local for debian since it isnt on my slack box.
But nevermind i managed to kill those daemons.

[Craig McPherson]

It's a generic Unix (LiSt Open Files) utility. Even under Debian it's an optional package, so a person has to choose to install it. If your distro doesn't have it as a package, you can always install it from source. Very handy.

[This message has been edited by Craig McPherson (edited 13 January 2001).]