Re: Solaris9 cron and UDP port 32820

Casper Dik <[email protected]> Tue, 06 Apr 2004 10:28:25 +0200
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
>Can someone shed some light on this for me? When (and why) did
>cron start listening on an UDP port?
>
>And no, this is not an April Fools Day gag (that has been the
>most common response to my queries on this :-)
>
>$ ps -ef | grep cron
>    root   212     1  0   Mar 30 ?        0:00 /usr/sbin/cron
>$ lsof -p 212
>COMMAND PID USER   FD   TYPE        DEVICE SIZE/OFF   NODE NAME
>
>[snip]
>
>cron    212 root    5u  IPv4 0x300017039e8      0t0    UDP *:32820 (Idle)


Many applications open UDP sockets to call name services; those typically
cache the file descriptor; it's normal for applications to have one or
more of such descriptors; when running nscd (name service cache daemon) 
it's somewhat more unusual.

Casper