Re: [K12OSN] Port 963

["Darryl L. Palmer, Jr." <DPalmer TootBee com>]

I would recommend probably running the server in single-user mode and
running chkrootkit.  Almost any scriptkiddie can grab a rootkit and
install it on your system if they are able to break in.  Most of the
better rootkits at least change ps and netstat so that you either don't
see them on your system or you are given incorrect addresses.

Darryl

Chris Hobbs said:
> dloomis cox-internet com wrote:
>
>> In running nmap on my server it shows port 963 open.  I cannot discern
>> what
>> it is.  A google search didn't reveal much.  I am concerned that it is
>> something that should not be here.
>
> netstat -p
>
> This will identify the process that has the port open on the box.