[K12OSN] Port 963

[Daniel Loomis <dloomis cox-internet com>]

First, let me say thanks to everyone for all the suggestions.

Here is what I discovered over the last few days:

nmap revealed port 963 open with the service as unknown.  Running 
fuser -v 963/tcp from the command line if found:

1.  port 963 was being used by rpc.quotad
    rpc.quotad is part of NFS and comes with the nfs-utils.rpm.

2.  /etc/services does not list anything for port 963 tcp or udp

3.  When I rebooted the server and logged in from a client, nmap
    then showed port 736 unknown.  

4.  Typing fuser -v 736/tcp reported rpc.quotad now using port 736

Conclusion:

It appears that rpc.quotad will use any port or it selects ports at
random. Perhaps that is a designed-in feature?

Surprised,


Daniel Loomis


P.S.

I also ran chkrootkit, which found no suspicious-looking fingerprints on
any of the usual files.