can't se what open port is used for

[Simon Jespersen]

hi have this port 868 which are listening.
i want to se if it is a service i can close down så i do a
lsof -nP -i TCP |grep LISTEN | grep 868
with no result-
then i do a netstat -an | grep 868 it gives me following tcp 0 0 *.868 *.* LISTEN

I have closed my rpcinfo but before that i got the program code 805306352

I donw have a clue of what to do next.

[Patrick Wallek]

You might be able to get a response from the application by telnet'ing to that port.

# telnet localhost 868

And see what happens.

Port 868 is not currently assigned to a specific application by the IANA, so it could be used by anything.

TCP/UDP ports currently assigned by IANA:
http://www.iana.org/assignments/port-numbers

[Simon Jespersen]

well it didnt give me anything. Are there other things i can do

[Christian Tremblay]

Check for an entry in /etc/services for port 868

# grep 868 /etc/services

[Simon Jespersen]

did that aswell, didnt give me anything the progrqm 805306352 shown in rpcinfo seems to be running default on all hpux servers.

[Patrick Wallek]

Are you trying to do SecureNFS via an SSH tunnel by chance?

I searched google with "hp-ux rpcinfo 805306352" (without the quotes) and the hits I got were for SecureNFS.

So it may be that your port 868 is listening for NFS connections from other machines.

[Simon Jespersen]

Were not using secure NFS, but we are using secureshell. sftp anf scp someone said in another thread at this forum that the program listening on this port was "windu" some kind of data procetor but it is not the case here. The funny thing is that it was dhowen in the rpcinfo, after that i closed the portmapper and nfs.services but the port is still listening.

[spex]

Hi,

Based on my own research (www.google.com), I'm guessing mountd is what's listening on 868/tcp.

PCS