Dr R L Oswald wrote:
> I am in process of evaluating SL4.4 for an HPC cluster procurement and 
> have set up small test system. This has no firewall enabled.
> 
> I note that by using nmap,  I can see that I have two ports open that I 
> was not expecting to see
> 
> 824/tcp    open        unknown
> 4321/tcp   open        rwhois
> 
> I can get a response out of each port using telnet. I have 
> unsuccessfully searched both your mailing archives and the system itself 
> for any place where the rwhois service is being started from. I can see 
> no daemon for it so it is perhaps implemented as a kernel service? The 
> unnamed port 824 is a mystery.
> 
> Can anyone shed any light on these open ports please ?
> 
> 
> Les Oswald
> Cranfield University
> 

On the machines in question, can you do a

   netstat -ap

And look over in the last column, it should say both the process ID and 
the Program name.

Also, do a

   /sbin/chkconfig  --list | grep on

and see what services are on.

Troy
-- 
__________________________________________________
Troy Dawson  [log in to unmask]  (630)840-6468
Fermilab  ComputingDivision/CSS  CSI Group
__________________________________________________