Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Unexpected connections from services in /etc/servics to app server

Status
Not open for further replies.

Mathet

Programmer
Mar 22, 1999
1
US
Services found in the /etc/services file unexpectedly connect to a application server (SASShare) that should never connect. There are as yet no patterns to when the connections are made.Under what conditions could this occur? THe following services have been observed to make connections: xinuexpansion, sbook, editbench, and nkd. Only SAS "VM's" should be connected to this server. In addition, it has also been observed that a client machine made a direct connection (not an application). Connections are via sockets. What are the above services and what do they do? How is it possible for a machine to make a direct connection?
 
Sorry if this may be off-base, I am more off a Solaris guy but how are you determining that the services from /etc/services are connecting to the app? Under normal circumstances a connection will be made under a given port and is likely to be remapped to allow for servicing while leaving the well-known or advertised port open. In the case of a machine attaching to a specific port, I have caught break in attempts by machines attempting to connect to unusual ports. This is easy to do with telnet and a handy test for verifying the functionality of various listeners.<br>
<br>
Sorry if this is no help, it has been awhile since I touched an AIX box...<br>
<br>
MAChase
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top