after upgrade from 3.0 to 3.1 there are new open ports

[AdrianW]

hello

i've got a question - what are these open ports ?

with 3.1 nmap and netstat -tulpn are showing :

PORT      STATE SERVICE
22/tcp    open  ssh
111/tcp   open  rpcbind
3128/tcp  open  squid-http  (bound to spiceproxy)
34571/tcp open  unknown (bound to java)
34572/tcp open  unknown (bound to java)
34573/tcp open  unknown (bound to java)

with 3.0 its :

PORT    STATE SERVICE
22/tcp  open  ssh
111/tcp open  rpcbind

It would be really nice to know for what these ports are used
and how i can close them


thank you very much
greetings
Adrian

 

[spirit]

3128 is for spice proxy gateway

don't known for the others. (bind to java??? proxmox don't use any java soft)

 

[AdrianW]

netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      3758/sshd
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      3912/master
tcp        0      0 127.0.0.1:85            0.0.0.0:*               LISTEN      2718/pvedaemon
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      2468/sshd
tcp        0      0 0.0.0.0:3128            0.0.0.0:*               LISTEN      2787/spiceproxy
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      2518/master
tcp        0      0 0.0.0.0:12320           0.0.0.0:*               LISTEN      3454/shellinaboxd
tcp        0      0 0.0.0.0:12321           0.0.0.0:*               LISTEN      4009/perl
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      3724/mysqld
tcp        0      0 0.0.0.0:8006            0.0.0.0:*               LISTEN      2764/pveproxy
tcp        0      0 0.0.0.0:44683           0.0.0.0:*               LISTEN      2077/rpc.statd
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      2060/rpcbind
tcp6       0      0 :::22                   :::*                    LISTEN      3758/sshd
tcp6       0      0 :::443                  :::*                    LISTEN      3501/apache2
tcp6       0      0 :::22                   :::*                    LISTEN      2468/sshd
tcp6       0      0 ::1:25                  :::*                    LISTEN      2518/master
tcp6       0      0 :::12322                :::*                    LISTEN      3501/apache2
[B]tcp6       0      0 :::34570                :::*                    LISTEN      2717/java[/B]
tcp6       0      0 :::80                   :::*                    LISTEN      3501/apache2
[B]tcp6       0      0 :::34571                :::*                    LISTEN      2717/java
tcp6       0      0 :::34572                :::*                    LISTEN      2717/java[/B]
tcp6       0      0 :::55020                :::*                    LISTEN      2077/rpc.statd
[B]tcp6       0      0 :::34573                :::*                    LISTEN      2717/java[/B]
tcp6       0      0 :::111                  :::*                    LISTEN      2060/rpcbind
udp        0      0 127.0.0.1:981           0.0.0.0:*                           2077/rpc.statd
udp        0      0 0.0.0.0:111             0.0.0.0:*                           2060/rpcbind
udp        0      0 0.0.0.0:42357           0.0.0.0:*                           2077/rpc.statd
udp        0      0 84.201.39.140:123       0.0.0.0:*                           2451/ntpd
udp        0      0 127.0.0.1:123           0.0.0.0:*                           2451/ntpd
udp        0      0 0.0.0.0:123             0.0.0.0:*                           2451/ntpd
udp        0      0 0.0.0.0:12321           0.0.0.0:*                           4009/perl
udp        0      0 0.0.0.0:963             0.0.0.0:*                           2060/rpcbind
udp6       0      0 :::111                  :::*                                2060/rpcbind
udp6       0      0 fe80::4b4:f8ff:fe2c:123 :::*                                2451/ntpd
udp6       0      0 fe80::487c:55ff:fe6:123 :::*                                2451/ntpd
udp6       0      0 fe80::4b2:79ff:fe09:123 :::*                                2451/ntpd
udp6       0      0 fe80::f4d0:1eff:fed:123 :::*                                2451/ntpd
udp6       0      0 fe80::225:90ff:fed4:123 :::*                                2451/ntpd
udp6       0      0 fe80::225:90ff:fed4:123 :::*                                2451/ntpd
udp6       0      0 2001:1608:21:19::2:123  :::*                                2451/ntpd
udp6       0      0 fe80::1:123             :::*                                2451/ntpd
udp6       0      0 ::1:123                 :::*                                2451/ntpd
udp6       0      0 :::123                  :::*                                2451/ntpd
udp6       0      0 :::34570                :::*                                2717/java
udp6       0      0 :::34570                :::*                                2717/java
udp6       0      0 :::34577                :::*                                2717/java
udp6       0      0 :::34578                :::*                                2717/java
udp6       0      0 :::34579                :::*                                2717/java
udp6       0      0 :::34580                :::*                                2717/java
udp6       0      0 :::51236                :::*                                2077/rpc.statd
udp6       0      0 :::963                  :::*                                2060/rpcbind

its a fresh Proxmox 3.1 Installation (from ISO) from yesterday


greetings

 

[spirit]

#ps -aux ?

 

[straluna]

IBM ServeRAID?

ciao,
a.

 

[AdrianW]

#ps -aux ?

root        2717  0.8  0.7 4432064 123700 ?      Sl   Aug29   9:29 ./jre/bin/java -Djava.compiler=NONE -cp /usr/StorMan/RaidMan.jar com.ibm.sysmgt.raidmgr.agent.ManagementAgent

found these 2 entries...
so its clear what is using java