What's port 884?

[HungSquirrel]

What's Ubuntu using it for, and can I safely close it?

$ sudo nmap -sV localhost

Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-11-05 00:37 CST
Interesting ports on localhost.localdomain (127.0.0.1):
(The 1655 ports scanned but not shown below are in state: closed)
PORT    STATE SERVICE VERSION
22/tcp  open  ssh     OpenSSH 3.8.1p1 (protocol 2.0)
111/tcp open  rpcbind 2 (rpc #100000)
631/tcp open  ipp     CUPS 1.1
884/tcp open  unknown

Nmap run completed -- 1 IP address (1 host up) scanned in 6.468 seconds

[jdodson]

it looks like it is an undefined port number. i wouldnt worry too much about closing it, unless you break something then

info here

[mr_ed]

Funny... I have 22, 25, 111, 139, 445, 631, and 650 open.

The 650 is unknown.

How come there's so many services running? Good thing I'm behind a hardware firewall. Is there a GUI way to shut all this stuff off, or do I need to go into /etc/init.d and remove a few symlinks?

[jdodson]

Originally Posted by mr_ed How come there's so many services running? Good thing I'm behind a hardware firewall. Is there a GUI way to shut all this stuff off, or do I need to go into /etc/init.d and remove a few symlinks?

no gui way to do it in the native ubuntu install, you
can do this though. strange that you have so many ports open, ubuntu by default should have no ports open.

[khc]

Originally Posted by HungSquirrel What's Ubuntu using it for, and can I safely close it? $ sudo nmap -sV localhost Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-11-05 00:37 CST Interesting ports on localhost.localdomain (127.0.0.1): (The 1655 ports scanned but not shown below are in state: closed) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 3.8.1p1 (protocol 2.0) 111/tcp open rpcbind 2 (rpc #100000) 631/tcp open ipp CUPS 1.1 884/tcp open unknown Nmap run completed -- 1 IP address (1 host up) scanned in 6.468 seconds

nmap'ing localhost won't show you anything useful. Ubuntu by default has no open port _to_the_outside_world_. The results you get are ports that you can connect to from your own machine. In order to get the real result, you need to nmap your machine from some place else on the network.

[HungSquirrel]

I know. I just want to know what service the port is for, and if I need the service running.

[khc]

Originally Posted by HungSquirrel I know. I just want to know what service the port is for, and if I need the service running.

sudo netstat -l -p --numeric-ports -tcp

[HungSquirrel]

I just rebooted, and now the unknown port I have open is 664, which doesn't show up in the output of netstat -l -p --numeric-ports -tcp.

[WW]

I don't understand the technical details, but I bet the unknown port is connected to famd. Try this sequence of commands:

sudo nmap -sS 127.0.0.1
pmap_dump

The first will probably show an open port whose "SERVICE" is "unknown". In the output of the second, you will see that this port is associated with something called sgi_fam. sgi_fam is connected to famd... somehow. So this "unknown" port is normal. Perhaps an expert could fill in the details...?

[HungSquirrel]

You were quite right.