[TriLUG] possible intruder - advice?

Brent Verner brent at rcfile.org
Mon May 24 16:01:48 EDT 2004


[2004-05-24 13:49] Andrew Perrin said:
| Thanks to all. Frankly, what's most worrisome to me is that 1025 appears
| open, where other ports are not:

try this to see if it'll show you which process is listenting

  sh# lsof -n|grep TCP|grep 1025

  b




More information about the TriLUG mailing list