topic tooltalk? in Operating System - HP-UX

tooltalk?

Doug O'Leary — Wed, 02 Nov 2011 20:16:04 GMT

Hey;

I'm suspecting a false positive; however, I can't seem to prove it the way I normally do. I had the security ream run a security scan against my system after which they reported that the system is running tooltalk on port 49157.

I ran "lsof -i :49157" and got no results yet "netstat -an | grep 49157" shows a listening port. Anyone know how a port can be open without a process listening on it?

And, anyone know what process name "tooltalk" whatever that is, runs as?

Thanks for any hints/tips/suggestions.

Doug O'Leary

Re: tooltalk?

Steven Schweda — Wed, 02 Nov 2011 20:41:10 GMT

> [...] "tooltalk" whatever that is, [...]

The only one of which I'm aware is part of the CDE:

http://en.wikipedia.org/wiki/ToolTalk

Beyond that, I know approximately nothing.

Re: tooltalk?

pradeep m — Thu, 03 Nov 2011 06:14:11 GMT

The below web link may help you.
http://www.cert.org/advisories/CA-2002-26.html