On Wed, 2007-04-18 at 21:58 -0500, Justin W wrote: > Simon Slater wrote: > > Hi all, > > > > Just a quick question arising from following another thread. Here is > > the result of nmap on a FC6 box: > > > > $ nmap localhost > > > > Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-04-18 14:10 > > EST > > Interesting ports on localhost.localdomain (127.0.0.1): > > Not shown: 1670 closed ports > > PORT STATE SERVICE > > 22/tcp open ssh > > 25/tcp open smtp > > 111/tcp open rpcbind > > 139/tcp open netbios-ssn > > 445/tcp open microsoft-ds > > 631/tcp open ipp > > 670/tcp open unknown > > 696/tcp open unknown > > 946/tcp open unknown > > 2049/tcp open nfs > > > > Nmap finished: 1 IP address (1 host up) scanned in 2.036 seconds > > $ > > > > What are the 3 "unknown" open ports? Also I cannot find rpcbind, > > netbios-ssn nor microsoft-ds under System>Services. What are these > > services for? > > > > Thanks > > Simon > > > I don't have experience with the 3 unknown port numbers off the top of > my head, but I do know that rpcbind is the port portmap uses to > communicate rpc services over a network. NFS versions two and three > depend on portmap being accessible, but version four doesn't require it > (if I remember correctly, but having it open does help some tools you > may want to use). Ports 139 and 445 are both used by samba for windows > sharing (139 being part of the NetBIOS naming system and 445 being the > actual data port). > > I hope this clears up some confusion for you. > > Justin > Thanks, yes it does. Simon
