[lug] ingreslock is listening?

Hugh Brown hugh at brownclan.org
Wed Jun 26 09:00:22 MDT 2002


netstat -ap|grep ingres

the p tells you which process is doing the listening.  You will have to
do it as root instead of as glowecon (unless glowecon owns the process).

Hugh


On Tue, 2002-06-25 at 22:42, Justin-lists wrote:
> Is there any reason this should be listening?
> 
> [glowecon at oldschool ]$ netstat -a |grep ingres
> tcp        0      0 *:ingreslock            *:*                     LISTEN
> 
> I know there have been bindshells and rootkits that use this in the past 
> (present?). How can I stop this from listening? Or should I even worry about 
> it..TIA.
> 
> Justin
> 
> --
> glow at jackmoves.com
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug





More information about the LUG mailing list