Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Using 'netstat -tulp' on my server box running under CentOS I have discovered strange listening ports 33363 (TCP) and 35661 (UDP). The thing is that 'PID/Program name' field for these ports contains nothing (dash actually). 'fuser -n tcp 33363' shows nothing. I have checked my box with chkrootkit and rkhunter utilities and it seems everything is O.K. Does anybody know what these sockets can be used for?

share|improve this question
add comment

2 Answers

Have you tried with lsof?

lsof -i TCP:33363
lsof -i UDP:35661
share|improve this answer
    
Thanks for reply! Like 'fuser' 'lsof' gives an empty output. –  user14241 Jul 24 '09 at 8:35
    
Pretty weird... You can also try to trace the pid and see if it shows something interesting: strace -p <PID> –  Francisco Jul 24 '09 at 8:58
1  
What PID, Fran? –  innaM Jul 24 '09 at 9:24
    
Doh! True, we do not know the pid. Thanks for pointing it out Manni :) –  Francisco Jul 24 '09 at 9:26
add comment

Did you run netstat -tulp as root?

share|improve this answer
    
Sure. :) Thanks for suggestion! –  user14241 Jul 24 '09 at 8:37
    
Could have been the reason for the missing pid. You never know ;-) –  innaM Jul 24 '09 at 9:22
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.