I am in process of evaluating SL4.4 for an HPC cluster procurement and have set up small test system. This has no firewall enabled. I note that by using nmap, I can see that I have two ports open that I was not expecting to see 824/tcp open unknown 4321/tcp open rwhois I can get a response out of each port using telnet. I have unsuccessfully searched both your mailing archives and the system itself for any place where the rwhois service is being started from. I can see no daemon for it so it is perhaps implemented as a kernel service? The unnamed port 824 is a mystery. Can anyone shed any light on these open ports please ? Les Oswald Cranfield University