[Shorewall-users] New and think I have been hacked

Tom Eastep teastep@shorewall.net
Fri, 12 Apr 2002 06:09:24 -0700 (Pacific Daylight Time)


On Fri, 12 Apr 2002, Paul Gear wrote:

>
> What are 909 & 32768?  I've not seen 909, and certainly 32768 cannot be a normal service.
>

On my box, 32768 is being listened by rpc.statd -- 909 might be worth a
look with "netstat -nap --tcp".

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net