Oddities found with netstat -an and lsof

I'll list things first.

- All of a sudden named is listening on UDP *:32769 UDP *:32770
- All of a sudden I have a couple of services listening on IPv6 and I don't ever recall adding IPv6 support to my server ... Also, I configured the services (bind, pop3, smtp) specifically to not listen on ipv6 last time I checked their configs
- w says 4 users online when there is only 3 actually listed


Now for logs/data:
-
named 1284 bind 24u IPv4 2958 UDP *:32769
named 1284 bind 25u IPv6 2959 UDP *:32770
-
exim4 1452 Debian-exim 0u IPv6 3073 TCP * Oddities found with netstat -an and lsofmtp (LISTEN)
-
sh 16404 root 1u CHR 136,2 4 /dev/pts/2 (deleted)
sh 16404 root 2u CHR 136,2 4 /dev/pts/2 (deleted)
monet:~# w
22:22:33 up 2:50, 4 users, load average: 1.00, 1.05, 1.23
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
root pts/0 xxxxxxxx 21:52 0.00s 0.02s 0.00s w
root pts/1 xxxxxxxx 21:23 10.00s 0.11s 0.11s -bash
root pts/3 xxxxxxxx 21:53 23.00s 0.02s 0.02s -bash
The IP addresses are valid. Please, no conspiracy theories. Oddities found with netstat -an and lsof Oddities found with netstat -an and lsof

 

 

 

 

Top