Jun 27 18:30:51 iago tcplogd: port 8007 connection attempt from localhost
[127.0.0.1]
This isn't a port listed in /etc/services, and I can't decide whether it's
really doing anything. How can I find out what the contents of this packet
are?
--
Derek
- post Corel, Debian 2.2r3 (potato), KDE
Hi Derek!
I just did a quick scan of assigned ports and according to IANNA (
http://www.iana.org/assignments/port-numbers) this port is
"un-assigned". I guess that means that no "official" service uses this
port. I also scanned the "trogan" database, and no known trogan uses
this port. I DID find that Wingate will use 8010, which is close but
not it.
This obviously is coming from your machine, so I would also suspect that
one of your installed programs is using this "free" port for internal
networking purposes. I can't tell you which one, though...never seen it
here.
Cheers,
-Don Spoon-
> This obviously is coming from your machine, so I would also suspect that
> one of your installed programs is using this "free" port for internal
> networking purposes. I can't tell you which one, though...never seen it
> here.
Thanks. My guess is that it's something on my Oracle database - but the
Oracle documentation sucks... I can't decide if it's actually working
properly or not, though.
Derek
Looking at the port listing I have, port 8008 is a tcp/udp http
alternate port. Although based on the listing, this may have no bearing
on what port 8007 actually is.
Rod
~Guitarlynn
Dunno how Oracle is installed, but if you can temporarily shut it down
(/etc/init.d/oracle stop maybe??) or better yet prevent it from being
started and see if the connect requests go away, that would confirm your
supspicions...
Cheers,
-Don Spoon-
That's what it is then. My Oracle installation (which uses Apache for the
web server) has about 14 of these jserv processes running - which explains
why it feels the need to try to connect on that port so often :-) I didn't
see anything in the httpd.conf file though that indicated it was using that
port, so I wasn't sure.
Since this is only a two-computer development network, there really
can't be any need for so many jserv processes (and I'm not doing jserv
development anyway!), so I'll have to see if I can configure them out of
existence.
Thanks a lot!
Yep. Commented out jserv.conf at the bottom of the httpd.conf file and it
all went away, Thanks
~Guitarlynn