Subject: Re: Weird Port Open
From: Patrick J. Larkin (plarkin@beth.k12.pa.us)
Date: Wed Apr 25 2001 - 09:17:34 MDT
> On Wed, 25 Apr 2001, Patrick J. Larkin wrote:
>
>> I ran a Port Scan on my YDL machine and found port 1024 is open. Anyone
>> know what this is? An analysis program reported that it was a Trojan named
>> "Netspy" but all of my research shows this as a Windows trojan.
>>
>> Anyone have any suggestions on what can be done?
>
> Did you try simply telnet'ing to the port to see what you get?
I have telnet turned off.
> Or:
>
> netstat -p --tcp
This gives me a bunch of active web connections.
> and:
> lsof
This is a really big list.
>
> ?
>
> - Paul
>
>
-- Patrick Larkin Information and Communications Technology Bethlehem Area School District
This archive was generated by hypermail 2a24 : Wed Apr 25 2001 - 09:19:31 MDT