What could be on udp:48152

Dmitry S. Makovey dmitry at athabascau.ca
Thu Nov 13 10:11:12 PST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi, I'm running stock FreeBSD with services running: samba (connections 
allowed only from local network), lpd (same), bind (all interfaces), apache 
(all), zope (local)
This machine is home gateway/http/printserver.
Recently some strange things happened as my printer all of sudden started to 
print stuff when nobody prints... luckily (or unluckily) it ran out of ink so 
I can't tell what's printed. Checked programs running, ports opened and found 
one unidentified:

udp4       0      0  *.49152                *.*

dimon at gateway ~ > sockstat | grep 49152
bind     named      270   4  udp4   *:49152               *:*

Now', is there any reason for bind to use this port?
Googling for that subject didn't bring any results other than usualy this port 
is first available for dynamic ports. Which doesn't make sence to me.

System:
FreeBSD 5.1

- -- 
Dmitry Makovey
Web Systems Administrator
Athabasca University
(780) 675-6245
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQE/s8mAyDrVuGfS98QRAlo6AJ9Miz8bbYjkldiTvSGOd+LfwY/3CACcCQAj
eNMb97scSLfQDvoHE6nx+L8=
=p4RL
-----END PGP SIGNATURE-----



More information about the freebsd-security mailing list