tooltalk?

[Doug O'Leary]

Hey;

I'm suspecting a false positive; however, I can't seem to prove it the way I normally do.  I had the security ream run a security scan against my system after which they reported that the system is running tooltalk on port 49157. 

I ran "lsof -i :49157" and got no results yet "netstat -an | grep 49157" shows a listening port.  Anyone know how a port can be open without a process listening on it? 

And, anyone know what process name "tooltalk" whatever that is, runs as?

Thanks for any hints/tips/suggestions.

Doug O'Leary

[Steven Schweda]

> [...]  "tooltalk" whatever that is, [...]

   The only one of which I'm aware is part of the CDE:

      http://en.wikipedia.org/wiki/ToolTalk

Beyond that, I know approximately nothing.

[pradeep m]

The below web link may help you.
http://www.cert.org/advisories/CA-2002-26.html