SUMMARY: Help identifying an rpc port

From: Chris Ruhnke (ruhnke@us.ibm.com)
Date: Fri Sep 13 2002 - 13:42:14 EDT


And the votes are in!

Thank you Mike Taylor, Oisin McGuinness adn Joerg Bruehe who all suggested
that good old utility "lsof" -- I shouldda thunk of that!

"lsof -i udp:807" and I get

COMMAND PID USER FD TYPE DEVICE SIZE/OFF INODE NAME
proplistd 1053 root 3u inet 0x6d89b680 0t0 UDP *:807

So, this "anonymous" service now has a name! And I can tell my Network
Security sweepers that it is OK.

[Original message]

>I have an 8200 running Tru64/TCR V4.0G (PK 3 and security patches thru
5/31/02) and various 3rd party packages.
>
>Issuing an "rpcinfo -p" on this node returns the following:
>
>program vers proto port
>...
> 300020 2 udp 807
> 300020 3 udp 807
>...
>
>Probing these two entries with "rpcinfo -n 807 -u mynode 300020 { 2 | 3 }"
returns:
>
> program 300020 version 2 ready and waiting
>and
> program 300020 version 3 ready and waiting
>
>How (short of killing everything on the system until these registrations
disappear) can I tell what process these entries point to?

--CHRis

Chris H. Ruhnke
Systems Management Integration Professional
Mid-Range Technical Services
IBM Global Services
St. Louis, MO

O'Toole's Law: Murphy is an optimist.



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:48:53 EDT