unable to get the service name by the port number

[Camel_1]

Hi there,

I ran netstat there has a UDP port opened, when I ran lsof to list the port details it only shown inetd process,

=>lsof -i tcp:49157
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
inetd 3378 root 4u inet 0x125788b00 0t0 TCP *:49157 (LISTEN)


I am not able to determine with service is using this port since there has no entry in the /etc/services file.

Is there any other way I can find out the details?

Thanks,

Simon

[Tom Danzig]

If inetd is listening on this port, there must be an entry in /etc/inetd.conf. Check there for further info.

[Steven E. Protter]

ps -ef | grep inet

I don't have a user named inet.

I would surmise based on a recent nfs class that this is a port grabbed by NFS. NFS v3 connects use port numbers in a certain range, not set up in /etc/services to provide services.

This is why its so tough to set up a firewall to pass NFS traffic through, because you never know what port you're going to get. I believe NFS v4 addresses this issue.

SEP

[Camel_1]

Thanks Tom, I checked the inetd.conf already and there has no such entry in the file.

[Tom Danzig · Accepted solution]

Try to telnet to the port. It may give you some info:

telnet 49157


To exit out:
CTL + ] and then type close

[Georg Tresselt]

Could it be something called "nlockmgr" ?

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=137155

[Scot Bean]

Looks like Georg is barking up the right tree.

Use 'rpcinfo -p' to see what ports the DCE services are using.

One of them is 'tcp 49157 nlockmgr'

The local daemon running on your machine is usually '/opt/dce/sbin/rpcd'.

[Camel_1]

Thanks guys,

rpcinfo shown the port is using by rcsd.

=>rpcinfo -p
program vers proto port service
100000 4 tcp 111 rpcbind
100000 3 tcp 111 rpcbind
100000 2 tcp 111 rpcbind
100000 4 udp 111 rpcbind
100000 3 udp 111 rpcbind
100000 2 udp 111 rpcbind
100024 1 tcp 49152 status
100024 1 udp 49165 status
100021 1 tcp 49153 nlockmgr
100021 1 udp 49166 nlockmgr
100021 3 tcp 49154 nlockmgr
100021 3 udp 49167 nlockmgr
100021 4 tcp 49155 nlockmgr
100021 4 udp 49168 nlockmgr
100020 1 udp 4045 llockmgr
100020 1 tcp 4045 llockmgr
100021 2 tcp 49156 nlockmgr
300370 3 tcp 49157 rscd

What is rcsd???

[Scot Bean]

rscd appears to be a Computer Associates storage daemon, see

http://esupport.ca.com/index.html?/public/sams/vantage/infodocs/srm1025.asp

I know nothing about it.

[Camel_1]

got it, thank you very much for all your help.