Re: Q: high-port tcp connections from localhost to localhost in HP-UX 11.31

Rick Jones <rick.jones2@xxxxxx> writes:

Ulrich Windl <Ulrich.Windl@xxxxxxxxxxxxxxxxxxxx> wrote:
I just noticed that a machine that is not doing a lot (except being
an NFSv4 server) shows many (i.e. >50) TCP connections from
localhost to localhost using high port numbers (i.e. >40000). Those
connections are in state TIME_WAIT. What also makes me wonder ist
this pattern:

localhost.A localhost.B
localhost.B localhost.A

(A and B are port numbers)

Does anybody know what those connections are for?

Nope. If you can catch one in ESTABLISHED you might find something
interesting from lsof. Similarly, a nettl on loopback. By the time
the connection hits TIME_WAIT, chances are _very_ good there is no
accompanying socket to find and so process. It is _possible_ but not
very likely.

While looking for it, I also found a server listening on UDP localhost port
49465 and port 49466. Unfortunately the machine lacks a "lsof". Using nettl, I
goot a suspect that "WbemWrapperMonitor" creates those connections. I'm not
good in reading the "netfmt" output.


(Actually I wanted to find out whether there's an equivalent of
Linux' "netstat -t" (that only shows TCP connections) for HP-UX
11.31, but there seems to be none)

netstat -a | grep tcp :)

:-)


rick jones
--
The computing industry isn't as much a game of "Follow The Leader" as
it is one of "Ring Around the Rosy" or perhaps "Duck Duck Goose."
- Rick Jones
these opinions are mine, all mine; HP might not want them anyway... :)
feel free to post, OR email to rick.jones2 in hp.com but NOT BOTH...
.

Relevant Pages

  • Re: Always allow loopbacks ?
    ... snipped) or to the original question that started the thread (which you ... to use localhost while they would block any non-legitimate connections. ... specifying the port of the server). ...
    (comp.security.firewalls)
  • Re: C# Reflection - Nasty bug??
    ... still get the prompt although I cannot connect to the server with my client. ... > Can you telnet into localhost to the port your server is running and get ... >> "is it possible for you to indicate that all connections in your program ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Tomcat connecting to MySQL - Ubuntu 8.10 Server
    ... attempts to telnet to localhost on port 3306. ... close the port immediately if you don't send a proper packet. ... case it did _open_ the port, so it's there and accepting connections. ...
    (Ubuntu)
  • Re: Q: high-port tcp connections from localhost to localhost in HP-UX 11.31
    ... an NFSv4 server) shows many TCP connections from ... localhost to localhost using high port numbers. ... connections are in state TIME_WAIT. ... - Rick Jones ...
    (comp.sys.hp.hpux)
  • Re: Can sendmail listen for SMTP on two prots at once?
    ... Just use a little netcat trick for that. ... This will accept connections to x11's port - 6000 and ... forward them to port 25 on localhost. ... will see the connection as coming from localhost. ...
    (freebsd-isp)
Loading