RE: [cobalt-security] netstat

[Dan Keller <dan@xxxxxxxxxx>]

At 11:42 AM 5/29/01 +0100, you wrote:

>> How do we stop the RaQ from listening to a port?
>
>Don't have a service running which listens to it. If the port's open, then
>something is listening; even if it is PortSentry.
>This is where the netstat command comes in useful. Try running:
>
>netstat -lnp
>
>which shows you listening ports and the process holding them open.

Yes, this would be helpful indeed... if only it worked!
On my RaQ2, this command gives the following result:

# netstat -lnp
netstat: invalid option -- l
usage: netstat [-veenNcCF] [<Af>] -r         netstat {-V|--version|-h|--help}
       netstat [-vnNcaeo] [<Socket>]
       netstat { [-veenNac] -i | [-cnNe] -M }

        -r, --route              display routing table
        -i, --interfaces         display interface table
        -s, --statistics         display networking statistics
        -M, --masquerade         display masqueraded connections

        -v, --verbose            be verbose
        -n, --numeric            dont resolve names
        -e, --extend             display other/more informations
        -c, --continuous         continuous listing

        -a, --all, --listening   display all
        -o, --timers             display timers

<Socket>={-t|--tcp} {-u|--udp} {-w|--raw} {-x|--unix} --ax25 --ipx --netrom
<Af>= -A {inet|ipx|netrom|ddp|ax25},... --inet --ipx --netrom --ddp --ax25

Could it be that the RaQ2 has an older version of netstat than
the one described here?

Dan Keller
dan@xxxxxxxxxx
http://www.keller.com/
+1 415 861-4500 (voice)
+1 415 861-4593 (fax)