SUMMARY: Help identifying an rpc port

From: Chris Ruhnke <ruhnke_at_us.ibm.com>
Date: Fri, 13 Sep 2002 12:42:14 -0500

And the votes are in!

Thank you Mike Taylor, Oisin McGuinness adn Joerg Bruehe who all suggested
that good old utility "lsof" -- I shouldda thunk of that!

"lsof -i udp:807" and I get

COMMAND PID USER FD TYPE DEVICE SIZE/OFF INODE NAME
proplistd 1053 root 3u inet 0x6d89b680 0t0 UDP *:807

So, this "anonymous" service now has a name! And I can tell my Network
Security sweepers that it is OK.


[Original message]

>I have an 8200 running Tru64/TCR V4.0G (PK 3 and security patches thru
5/31/02) and various 3rd party packages.
>
>Issuing an "rpcinfo -p" on this node returns the following:
>
>program vers proto port
>...
> 300020 2 udp 807
> 300020 3 udp 807
>...
>
>Probing these two entries with "rpcinfo -n 807 -u mynode 300020 { 2 | 3 }"
returns:
>
> program 300020 version 2 ready and waiting
>and
> program 300020 version 3 ready and waiting
>
>How (short of killing everything on the system until these registrations
disappear) can I tell what process these entries point to?

--CHRis

Chris H. Ruhnke
Systems Management Integration Professional
Mid-Range Technical Services
IBM Global Services
St. Louis, MO


O'Toole's Law: Murphy is an optimist.
Received on Fri Sep 13 2002 - 17:42:55 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:43 NZDT