Hi Bruce, thank you for your recommendations . . . I passed the test and the only wanrning is this one : <br><br>/usr/sbin/unhide [ Warning ]<br> /usr/sbin/useradd [ OK ]<br>
/usr/sbin/userdel [ OK ]<br> /usr/sbin/usermod [ OK ]<br> /usr/sbin/vipw [ OK ]<br> /usr/sbin/unhide-linux26 [ Warning ]<br>
<br><br><div class="gmail_quote">On Wed, Jul 1, 2009 at 1:42 PM, Bruce Ferrell <span dir="ltr"><<a href="mailto:bferrell@baywinds.org">bferrell@baywinds.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im"><br>
<br>
Xavier Cardil wrote:<br>
> I found nothing is passing through those ports . . . I think something<br>
> was sending the stream to our PST/SIP gateways, so the calls where<br>
> affected when getting in to the gateways. I found we are not running any<br>
> extra TCL applications on those gateways . . . could it be possible ?<br>
> Could an UDP stream get mixed with another through an UDP port ? Is a<br>
> very strange issue but I really want to know why . . . any more hints ?<br>
><br>
> Thanks.<br>
><br>
> On Wed, Jul 1, 2009 at 11:48 AM, John A. Sullivan III<br>
</div>> <<a href="mailto:jsullivan@opensourcedevel.com">jsullivan@opensourcedevel.com</a> <mailto:<a href="mailto:jsullivan@opensourcedevel.com">jsullivan@opensourcedevel.com</a>>><br>
<div class="im">> wrote:<br>
><br>
> On Wed, 2009-07-01 at 10:14 +0100, Steve Howes wrote:<br>
> > On 1 Jul 2009, at 09:54, Xavier Cardil wrote:<br>
</div>> > > udp 0 0 <a href="http://0.0.0.0:2727" target="_blank">0.0.0.0:2727</a> <<a href="http://0.0.0.0:2727" target="_blank">http://0.0.0.0:2727</a>><br>
<div class="im">> > > 0.0.0.0:* 4989/asterisk<br>
</div>> > > udp 0 0 <a href="http://0.0.0.0:9001" target="_blank">0.0.0.0:9001</a> <<a href="http://0.0.0.0:9001" target="_blank">http://0.0.0.0:9001</a>><br>
<div class="im">> > > 0.0.0.0:* 26354/udp-sender<br>
</div>> > > udp 0 0 <a href="http://0.0.0.0:5000" target="_blank">0.0.0.0:5000</a> <<a href="http://0.0.0.0:5000" target="_blank">http://0.0.0.0:5000</a>><br>
<div class="im">> > > 0.0.0.0:* 4989/asterisk<br>
> ><br>
> > 2727 = mgcp<br>
> ><br>
> > I found that with Google. A useful tool.<br>
> <snip><br>
> I thought 9001 was for JetDirect style print servers. I don't recall<br>
> off the top of my head if they are tcp or udp - John<br>
> --<br>
> John A. Sullivan III<br>
> Open Source Development Corporation<br>
> +1 207-985-7880<br>
</div>> <a href="mailto:jsullivan@opensourcedevel.com">jsullivan@opensourcedevel.com</a> <mailto:<a href="mailto:jsullivan@opensourcedevel.com">jsullivan@opensourcedevel.com</a>><br>
<div class="im">><br>
> <a href="http://www.spiritualoutreach.com" target="_blank">http://www.spiritualoutreach.com</a><br>
> Making Christianity intelligible to secular society<br>
><br>
<br>
<br>
</div>Assuming first your box doesn't have a rootkit installed (to check for<br>
a rootkit, use rkhunter. Your distro may have it packaged, if not<br>
google for it) I use lsof to find out what is listening to TCP and UDP<br>
ports:<br>
<br>
lsof -P | grep UDP<br>
lsof -P | grep TCP<br>
<br>
YMMV<br>
<font color="#888888"><br>
Bruce<br>
</font><div><div></div><div class="h5"><br>
<br>
<br>
_______________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</div></div></blockquote></div><br>