ircd

[kalin mintchev]

i did run chkrootkit before writing this... nothing. and nothing on nmap
about those ports!?!.... thanks...

# chkrootkit -V
chkrootkit version 0.44



> I concur.  You might also want to run chkrootkit (security/chkrootkit) to
> see if you've been "0wned" so to speak.
>
> On Tue, 7 Jun 2005, Bob Bomar wrote:
>
>> kalin mintchev wrote:
>> |
>> | hi all...
>> |
>> | i found this 2 lines in the netstat output on one of my machines. we
>> are
>> | not running ircd and according to nmap ports 3483 and 2143 are
>> closed...
>> |
>> | can somebody please explain??   thanks.....
>> |
>> | tcp4       0      0  server.3484              zagreb.hr.eu.und.ircd
>> | ESTABLISHED
>> | tcp4       0      0  server.2143              free.tyranz.com.ircd
>> | ESTABLISHED
>>
>> Are you running any kind of irc client?  The output means:
>>
>> There are 2 connections, one on port 3484, and another on 2143
>> connected to zagreb.hr.eu.und and free.tyranz.com on the port
>> for ircd, port 6667.
>>
>> Some trojens use irc channels for control, might look into that.
>>
>> --
>> Bob Bomar
>> bob at bomar.us
>> http://www.bomar.us/~bob
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "freebsd-questions-unsubscribe at freebsd.org"
>> ------------ Output from gpg ------------
>> gpg: Signature made Tue Jun  7 22:24:55 2005 CDT using DSA key ID
>> 3AED74AA
>> gpg: Can't check signature: public key not found
>>
>>
>


-- 
--
"In a world without walls or fences, who needs Windows and Gates?"