SUMMARY: What are ports 5987 and 32768?

From: Mika Tuupola (tuupola@appelsiini.net)
Date: Fri Mar 31 2000 - 17:47:27 CST


        Did not receive the answer from the list, but did some
        more digging and found out the java programs belonged
        to WBEM (Web-Based Enterprise Management) system.

        You can get rid of the by disabling S90wbem in
        /etc/init.d/rcX.d/.
        
        Original question follows:

        ...

        I have a fresh x86 Solaris8 install which I am stripping
        down to secure it. There are two weird tcp ports answering
        on the host and I cant seem to figure out what they are.

        5987 open tcp unknown
        32768 open tcp unknown

        Lsof says they are java programs. I have allready removed
        everything which starts any java from /etc/rcX.d/ but they
        still appear after rebooting.

        Any idea what answers in these ports and where are these
        programs started at bootup time?

(tuupola)[temporary][pts/2]/usr/local/src/lsof_4.48#./lsof -i TCP:5987
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 238 root 8u IPv4 0xe14017b0 0t0 TCP *:5987 (LISTEN)
(tuupola)[temporary][pts/2]/usr/local/src/lsof_4.48#./lsof -i TCP:32768
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 238 root 10u IPv4 0xe18119c0 0t0 TCP *:32768 (LISTEN)
(tuupola)[temporary][pts/2]/usr/local/src/lsof_4.48#

-- 
Mika Tuupola                      http://www.appelsiini.net/~tuupola/



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:14:05 CDT