[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] ps -aux sendmail and netstat



> I think I already told you that...
> netstat -pt

You did, but it was so simple I didn't write it down because I thought
I wouldn't forget it.
I wrote it down this time!

Is it normal to see postgres show up on a netstat? I just caught it,
and a few seconds later it was gone.
This is what showed up (briefly) as I was playing around with the
different netstat options (and it wasn't anytime near the active
monitor 15-minute fireoff, still had about 7 minutes to go before that
would've done anything):
unix  1      [ ]         STREAM     CONNECTED     221351 @00000ba7
unix  1      [ ]         STREAM     CONNECTED     221780 @00000bd8
unix  1      [ W ]       STREAM     CONNECTED     221781
/tmp/.s.PGSQL.5432
unix  1      [ W ]       STREAM     CONNECTED     221352
/tmp/.s.PGSQL.5432

All 4 of those were gone about 10 seconds later.  The flag is
something I've never seen before, as is the postgres directory over in
/tmp. I mean, I've seen the directory; it's on both of my machines,
but I've never seen it being accessed on a netstat report.

CarrieB