Re: Solaris9 cron and UDP port 32820

Stacy Millions <[email protected]> Wed, 07 Apr 2004 06:55:08 -0600
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
Casper Dik wrote:
>>Can someone shed some light on this for me? When (and why) did
>>cron start listening on an UDP port?

> 
> Many applications open UDP sockets to call name services; those typically
> cache the file descriptor; it's normal for applications to have one or
> more of such descriptors; when running nscd (name service cache daemon) 
> it's somewhat more unusual.


Thanks. That was the best guess anyone at the office could come up with. 
I was surprised because cron seemed to be the only application showing 
this behavior and I would have expected others if it was a name services
call. It does make for interesting nmap scans :-)

-stacy