[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] Open port 1 & 6 question
- Subject: RE: [cobalt-security] Open port 1 & 6 question
- From: "Graeme Fowler" <graeme.fowler@xxxxxxxxxxxxxx>
- Date: Fri, 12 Jul 2002 10:06:14 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Charles Teton wrote:
> I checked the archive and google, but can't seem to get any
> definite info why Ports 1 and 6 seem to be running.
<SNIP>
> Raw 0 0 0.0.0.0:1 (icmp) 0.0.0.0:* 7 -
> Raw 0 0 0.0.0.0:6 (tcp) 0.0.0.0:* 7 -
They're not network sockets, they are (as they say at the start of the line) 'raw' sockets. They're actually used internally to the system to allow it to process TCP and ICMP packets - pretty fundamental in normal operation ;-)
There are plenty of raw socket FAQs kicking around, including a bunch of man pages on your RaQ. Try "man 7 raw" or "man 7 icmp" for starters. They're technical, but they explain it fully.
Graeme
--
Graeme Fowler
System Administrator
Host Europe Group PLC