Re: Solaris9 cron and UDP port 32820
Stacy Millions <[email protected]> Wed, 07 Apr 2004 06:55:08 -0600
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Message-ID | <[email protected]> |
Casper Dik wrote: >>Can someone shed some light on this for me? When (and why) did >>cron start listening on an UDP port? > > Many applications open UDP sockets to call name services; those typically > cache the file descriptor; it's normal for applications to have one or > more of such descriptors; when running nscd (name service cache daemon) > it's somewhat more unusual. Thanks. That was the best guess anyone at the office could come up with. I was surprised because cron seemed to be the only application showing this behavior and I would have expected others if it was a name services call. It does make for interesting nmap scans :-) -stacy