Strange things seen in netstat on FC3... !

[James Mckenzie]

-----Original Message-----
From: Jim van Wel <info at hempcity.net>
Sent: Feb 8, 2005 9:54 AM
To: fedora-list at redhat.com
Subject: Strange things seen in netstat on FC3... !

Anyone?

Posted this already some days ago...

Hi there,

Maybe you guys can help. I have been working for a long time with many linux
machines, but this is the first one with a strange output when I do a simple
netstat. I get lines with warning, got duplicate tcp line. Now I checked on
the internet for these lines, and nothing found, but I found something with
warning, got BOGUS tcp line. Well, I checked on the machine for rootkits
etc... nothing really found and nothing strange. Chkrootkit does not see
anything funny. Is this a bad message...? Or don't I have to worry about a
thing? This is new to me, so please reply!

tcp        0      0 127.0.0.1:http 127.0.0.1:1451 TIME_WAIT
tcp        0      0 127.0.0.1:http 127.0.0.1:1734 TIME_WAIT
tcp        0      0 127.0.0.1:http 127.0.0.1:2893     TIME_WAIT
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.

-----James' Reply-----
Jim:

Do you have Apache installed on your Linux system?  It may be that your are running netstat at the same time that your web page is refreshing.  This could be one possiblity.  If you do not have Apache on your system, nothing should be connecting to that port on your system.

-- 





James McKenzie
A Proud User of Linux!