Gentoo Archives: gentoo-user

From: Dan Farrell <dan@×××××××××.cx>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Hacked by association?
Date: Thu, 20 Sep 2007 04:23:10
Message-Id: 20070919230952.0b8812c4@pascal.spore.ath.cx
In Reply to: Re: [gentoo-user] Hacked by association? by Grant
1 On Wed, 19 Sep 2007 18:47:37 -0700
2 Grant <emailgrant@×××××.com> wrote:
3
4 > > > > I recognize everything in 'ps -ef' I think, but I've never
5 > > > > really used netstat before. Under "Active Internet
6 > > > > connections" I don't recognize:
7 > > > >
8 > > > > tcp localhost:10030
9 > > > > tcp *:snpp
10 > > >
11 > > > Also, snpp is for pagers:
12 > > > http://en.wikipedia.org/wiki/Simple_Network_Paging_Protocol
13 > >
14 > > With netstat -lp it looks like *:snpp is associated with apache2 and
15 > > is using the same pid as *:http and *:https. I've never set up
16 > > anything having to do with a pager. I've never had a pager. What
17 > > can I do to investigate that further?
18 >
19 > This snpp pager thing is the weirdest thing I've found. It sounds
20 > like the kind of thing I would know if I set up. Someone has some
21 > kind of pager alert installed on my system?
22 >
23 > - Grant
24 http://www.qpage.org/rfc1861.html
25
26 Network Working Group
27 Request for Comments: 1861
28 October 1995
29
30 ...
31 ...1. Introduction With all due apologies to the Glenayre engineers (who
32 take offense at the term "nerd") beepers are as much a part of computer
33 nerdom as X- terminals--perhaps, unfortunately, more. The intent of
34 Simple Network Paging Protocol is to provide a standard whereby pages
35 can be delivered to individual paging terminals...
36
37 I thought that was amusing. Now I think the question is, if apache is
38 really serving that, isn't something going to show up in the logs
39 maybe?
40
41 and BTw, have you done an external portmap?
42 --
43 gentoo-user@g.o mailing list