[H-GEN] Does anyone know what LocalInfoSrvr is?

[Tony Nugent]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

On Wed Feb 12 2003 at 09:06, Sarah Walters wrote:

> My husband and I have  been looking through our security logs, and we
> don't recognise port 1487. According to /etc/services:
> 
> localinfosrvr   1487/tcp
> localinfosrvr   1487/udp
> 
> Does anyone have a clue what this actually means?

Off-hand (and without doing a google search), no.

  (I don't have an entry for that port in my own /etc/services.
  Often things like this are added to it when installing software
  that needs it).

If something is running on your box that has that port open, then
you can find out what it is (and therefore get an idea what it is
used for) by doing something like this to see what network ports are
open by any processes:

	netstat -plutn

(At least that's the magic spell on my linux box... p=processes,
l=listening, u=udp, t=tcp, n=port/ip numbers - no lookups.  The -u
and -t parameters are not well documented, only briefly mentioned on
the --help screen).

> Thanks,

> Mrs Sarah Walters
> Systems Group
> Information Technology Services
> University of Wollongong

(Oh, I never noticed until now that you are not local to Brisbane).

> Phone: +61 2 4221 3775

> * This is list (humbug) general handled by majordomo at lists.humbug.org.au .

For the humbug moderator/admins... I noticed in a very recent post
to bugtraq that there is a major flaw in majordomo that will allow
anyone to obtain unauthorised listings of all the subscribers to any
of the lists managed by it.  Thought I'd mention this just in case
it wasn't known.

Cheers
Tony

--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/