upd 799 open port


Results 1 to 5 of 5

Thread: upd 799 open port

  1. #1
    Join Date
    Dec 2004
    Location
    Germany
    Posts
    80

    upd 799 open port

    The UDP:799 port is open on my rhel 3 server.
    I can't find which service is behind it. I've tried everything with no success. Now I suspect to be a backdoor or something like this


    1. #nmap -sU localhost
    799/udp open unknown
    2. netsta -tupan | grep 799
    udp 0 0 0.0.0.0:799 0.0.0.0:* -
    3.lsof -i :799 -> nothing

    4. lsof -V -i UDP -> nothing related


    Do you have any idea? I thing this is very difficult of impossible finding what is behind this port.

    What could I do next? Please give me some hints!!


    Thanks in advance!
    Best regards,
    ddaas

  2. #2
    Join Date
    Aug 2002
    Location
    Delaware
    Posts
    4,310
    if this port is blocked by a firewall, try unblocking it and scanning again. I wouldn't be surprised if it then showed up as closed.

    http://www.dslreports.com/forum/rema...p,16~mode=flat

    open basically means that it didn't receive a "this port is closed" message. That means that it's certainly possible for no machine to be there, or for an open port to exist.
    Last edited by sharth; 07-11-2005 at 10:35 AM.
    irc.freenode.net #justlinux The Not So Official JL IRC Channel.
    Debian Apt-Get

  3. #3
    Join Date
    Dec 2004
    Location
    Germany
    Posts
    80
    udp:799 is not filtered.
    I set up a sniffer and I don't get back any ICMP dest port unreachable. In fact I don't get back anything from this port.
    I've tried to scan other udp ports and if the port is closed I get back icmp dest port unreachable so my ip/tcp stack works as it supposed to work.

    I tell you, I've already tried almost anything.
    Best regards,
    ddaas

  4. #4
    Join Date
    Dec 2002
    Posts
    1,088
    I think this may answer your port 799 issue
    http://seclists.org/lists/incidents/2000/Sep/0165.html
    Check out my ebay auction for my signature space on JLC.

    Hey if people can sell advertising space on thier bodies, I figure I can make $.02 on my signature space.

  5. #5
    Join Date
    Dec 2004
    Location
    Germany
    Posts
    80
    Thanks for that link!
    Best regards,
    ddaas

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •