ircd

[Bob Bomar]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

kalin mintchev wrote:
|
| hi all...
|
| i found this 2 lines in the netstat output on one of my machines. we are
| not running ircd and according to nmap ports 3483 and 2143 are closed...
|
| can somebody please explain??   thanks.....
|
| tcp4       0      0  server.3484              zagreb.hr.eu.und.ircd
| ESTABLISHED
| tcp4       0      0  server.2143              free.tyranz.com.ircd
| ESTABLISHED

Are you running any kind of irc client?  The output means:

There are 2 connections, one on port 3484, and another on 2143
connected to zagreb.hr.eu.und and free.tyranz.com on the port
for ircd, port 6667.

Some trojens use irc channels for control, might look into that.

- --
Bob Bomar
bob at bomar.us
http://www.bomar.us/~bob
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCpmUH9Jm/aTrtdKoRArViAJ4pU6PUuUXD/Hu0yR03/SqwaYi9ewCgop6K
WZz26GJmYJSl/FpbquE0hh4=
=Yqid
-----END PGP SIGNATURE-----