Red Hat Bugzilla – Bug 21588
please declare undeclared ports in /etc/services
Last modified: 2014-03-16 22:17:30 EDT
Recently there was a (n erroneous) report of hacking on my machine. In checking for activity, I found ports 1024 and 1032 in use. These turned out to be gnome-session and gnome-name-service, but this wasn't declared in /etc/services. It took a while to figure out what was active on those ports, as telnetting to them gave binary garbage or nothing. Please declare the use of ports in /etc/services. In trying to figure out what these were, I found a thread on a security mailing list wondering what they were as well, though they didn't figure it out. Thanks, --jh--
Reassigning to the package containing /etc/services. I'm not sure /etc/services normally contains user apps that open ports though, perhaps it's just systemwide services.
/etc/services is for standard registered ports (ftp, ssh, and the like.) The things you mention like gnome-name-service are just allocated to the first available port. Hence, you can't really list any defined ports for them.