크랙을 당하고 있는게 아니라 다른 서버들을 무차별적으로 공격을
하고 있군요.(크랙은 예전에 당하신듯)
근데 서버가 유닉스나 리눅스 계일것 같은데
이상한 데몬과 필요없는 데몬이 너무 많이 존재하네요.
제가 보기엔 크랙을 당하고 다른서버를 공격하고 있네요.
빠른 조치가 필요 할듯 하네요.
참조 요망
해킹피해시스템 분석 및 복구 절차
http://www.certcc.or.kr/paper/tr2000/2000-02/tr2000-02.html http://www.certcc.or.kr/ 이곳에 도움을 구하세요.
: 서버호스팅 업체에서 자꾸 전화가 옵니다...
: 죽겠습니다.
:
: netstat 라는 명령을 했더니... 아래와 같은 내용이 나오구 다시
:
: netstat -nap 란 명령을 했더니... 그 밑의 내용이 나옵니다..
:
: httpd 란 걸 보구서 아파치를 stop 했더니 좀 잠잠해 진것 같습니다...
:
: 이럴땐 어떻게 해야 될런지 좀 도와 주시기 바랍니다.
:
: [root@ns home]# netstat
: Active Internet connections (w/o servers)
: Proto Recv-Q Send-Q Local Address Foreign
Address State
: tcp 0 1 ns.natelecom.co.k:48511
62.241.80.226:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48447
62.241.80.162:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48448
62.241.80.163:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48512
62.241.80.227:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48509
62.241.80.224:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48445
62.241.80.160:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48510
62.241.80.225:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48446
62.241.80.161:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48451
62.241.80.166:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48515
62.241.80.230:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48630
62.241.81.89:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48566
62.241.81.25:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48631
62.241.81.90:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48567
62.241.81.26:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48632
62.241.81.91:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48568
62.241.81.27:http SYN_SENT
: tcp 0 0 ns.natelecom.co.k:51586
ircu.bredband.com:ircd ESTABLISHED
: tcp 0 1 ns.natelecom.co.k:48625
62.241.81.84:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48561
62.241.81.20:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48626
62.241.81.85:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48562
62.241.81.21:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48627
62.241.81.86:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48563
62.241.81.22:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48628
62.241.81.87:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48564
62.241.81.23:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48621
62.241.81.80:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48557
62.241.81.16:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48622
62.241.81.81:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48558
62.241.81.17:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48623
62.241.81.82:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48559
62.241.81.18:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48624
62.241.81.83:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48560
62.241.81.19:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48617
62.241.81.76:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48553
62.241.81.12:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48618
62.241.81.77:http SYN_SENT
: tcp 0 1 ns.natelecom.co.k:48554
62.241.81.13:http SYN_SENT
: Active UNIX domain sockets (w/o servers)
: Proto RefCnt Flags Type State I-Node
Path
: unix 11 [ ] DGRAM
900 /dev/log
: unix 2 [ ] DGRAM 22176
: unix 2 [ ] DGRAM 1936
: unix 2 [ ] DGRAM 1794
: unix 2 [ ] DGRAM 1728
: unix 2 [ ] DGRAM 1499
: unix 2 [ ] DGRAM 1493
: unix 2 [ ] DGRAM 1119
: unix 2 [ ] DGRAM 962
: unix 2 [ ] DGRAM 916
:
:
:
: [root@ns home]# netstat -nap
: Active Internet connections (servers and established)
: Proto Recv-Q Send-Q Local Address Foreign
Address State PID/Program name
: tcp 0 0 0.0.0.0:4000
0.0.0.0:* LISTEN 27701/b
: tcp 0 0 0.0.0.0:32768
0.0.0.0:* LISTEN 671/rpc.statd
: tcp 0 0 0.0.0.0:22305
0.0.0.0:* LISTEN 943/kserver
: tcp 0 0 127.0.0.1:32769
0.0.0.0:* LISTEN 889/xinetd
: tcp 0 0 0.0.0.0:199
0.0.0.0:* LISTEN 829/snmpd
: tcp 0 0 0.0.0.0:24362
0.0.0.0:* LISTEN 5145/psybnc
: tcp 0 0 0.0.0.0:110
0.0.0.0:* LISTEN 1154/tcpserver
: tcp 0 0 0.0.0.0:111
0.0.0.0:* LISTEN 647/portmap
: tcp 0 0 0.0.0.0:80
0.0.0.0:* LISTEN 10696/httpd
: tcp 0 0 0.0.0.0:1234
0.0.0.0:* LISTEN 4826/psybnc
: tcp 0 0 0.0.0.0:21
0.0.0.0:* LISTEN 889/xinetd
: tcp 0 0 61.100.12.198:53
0.0.0.0:* LISTEN 843/named
: tcp 0 0 127.0.0.1:53
0.0.0.0:* LISTEN 843/named
: tcp 0 0 0.0.0.0:22
0.0.0.0:* LISTEN 864/sshd
: tcp 0 0 0.0.0.0:25
0.0.0.0:* LISTEN 5818/tcpserver
: tcp 0 0 127.0.0.1:953
0.0.0.0:* LISTEN 843/named
: tcp 0 0 0.0.0.0:443
0.0.0.0:* LISTEN 10696/httpd
: tcp 0 1 61.100.12.198:51789
62.241.93.152:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51853
62.241.93.216:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51790
62.241.93.153:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51854
62.241.93.217:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51791
62.241.93.154:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51855
62.241.93.218:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51792
62.241.93.155:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51856
62.241.93.219:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51793
62.241.93.156:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51857
62.241.93.220:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51794
62.241.93.157:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51858
62.241.93.221:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51795
62.241.93.158:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51859
62.241.93.222:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51796
62.241.93.159:80 SYN_SENT 19143/httpd
: tcp 0 0 61.100.12.198:51586
195.54.102.4:6667 ESTABLISHED 5145/psybnc
: tcp 0 1 61.100.12.198:51860
62.241.93.223:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51781
62.241.93.144:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51845
62.241.93.208:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51782
62.241.93.145:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51846
62.241.93.209:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51783
62.241.93.146:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51847
62.241.93.210:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51784
62.241.93.147:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51848
62.241.93.211:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51785
62.241.93.148:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51849
62.241.93.212:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51786
62.241.93.149:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51850
62.241.93.213:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51787
62.241.93.150:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51851
62.241.93.214:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51788
62.241.93.151:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51852
62.241.93.215:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51837
62.241.93.200:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51838
62.241.93.201:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51774
62.241.93.137:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51839
62.241.93.202:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51775
62.241.93.138:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51776
62.241.93.139:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51840
62.241.93.203:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51777
62.241.93.140:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51841
62.241.93.204:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51778
62.241.93.141:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51842
62.241.93.205:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51779
62.241.93.142:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51843
62.241.93.206:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51780
62.241.93.143:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51844
62.241.93.207:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51829
62.241.93.192:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51830
62.241.93.193:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51831
62.241.93.194:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51832
62.241.93.195:80 SYN_SENT 19143/httpd
: tcp 8 0 61.100.12.198:51612
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51645
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 0 1 61.100.12.198:51833
62.241.93.196:80 SYN_SENT 19143/httpd
: tcp 8 0 61.100.12.198:51692
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51517
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51548
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51551
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51345
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51347
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51341
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51343
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 0 1 61.100.12.198:51834
62.241.93.197:80 SYN_SENT 19143/httpd
: tcp 8 0 61.100.12.198:51401
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51397
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51399
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51395
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51436
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51438
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51290
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51287
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 0 1 61.100.12.198:51835
62.241.93.198:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51836
62.241.93.199:80 SYN_SENT 19143/httpd
: tcp 8 0 61.100.12.198:51729
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 0 0 61.100.12.198:51728
195.13.187.9:443 ESTABLISHED 22545/httpd
: tcp 8 0 61.100.12.198:51718
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 8 0 61.100.12.198:51715
195.13.187.9:443 CLOSE_WAIT 22545/httpd
: tcp 0 1 61.100.12.198:51897
62.241.94.4:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51821
62.241.93.184:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51885
62.241.93.248:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51898
62.241.94.5:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51822
62.241.93.185:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51886
62.241.93.249:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51899
62.241.94.6:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51823
62.241.93.186:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51887
62.241.93.250:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51900
62.241.94.7:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51824
62.241.93.187:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51888
62.241.93.251:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51893
62.241.94.0:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51825
62.241.93.188:80 SYN_SENT 19143/httpd
: tcp 0 4728 61.100.12.198:22
211.59.206.210:1581 ESTABLISHED 23022/sshd
: tcp 0 1 61.100.12.198:51889
62.241.93.252:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51894
62.241.94.1:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51826
62.241.93.189:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51890
62.241.93.253:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51895
62.241.94.2:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51827
62.241.93.190:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51891
62.241.93.254:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51896
62.241.94.3:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51828
62.241.93.191:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51892
62.241.93.255:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51813
62.241.93.176:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51877
62.241.93.240:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51814
62.241.93.177:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51878
62.241.93.241:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51815
62.241.93.178:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51879
62.241.93.242:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51816
62.241.93.179:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51880
62.241.93.243:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51901
62.241.94.8:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51817
62.241.93.180:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51881
62.241.93.244:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51818
62.241.93.181:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51882
62.241.93.245:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51819
62.241.93.182:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51883
62.241.93.246:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51820
62.241.93.183:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51884
62.241.93.247:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51805
62.241.93.168:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51869
62.241.93.232:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51806
62.241.93.169:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51870
62.241.93.233:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51807
62.241.93.170:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51871
62.241.93.234:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51808
62.241.93.171:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51872
62.241.93.235:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51809
62.241.93.172:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51873
62.241.93.236:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51810
62.241.93.173:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51874
62.241.93.237:80 SYN_SENT 19143/httpd
: tcp 0 0 61.100.12.198:51279
195.13.187.9:80 CLOSE_WAIT 22545/httpd
: tcp 0 1 61.100.12.198:51811
62.241.93.174:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51875
62.241.93.238:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51812
62.241.93.175:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51876
62.241.93.239:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51797
62.241.93.160:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51861
62.241.93.224:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51798
62.241.93.161:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51862
62.241.93.225:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51799
62.241.93.162:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51863
62.241.93.226:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51800
62.241.93.163:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51864
62.241.93.227:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51801
62.241.93.164:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51865
62.241.93.228:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51802
62.241.93.165:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51866
62.241.93.229:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51803
62.241.93.166:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51867
62.241.93.230:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51804
62.241.93.167:80 SYN_SENT 19143/httpd
: tcp 0 1 61.100.12.198:51868
62.241.93.231:80 SYN_SENT 19143/httpd
: udp 0 0 0.0.0.0:32768
0.0.0.0:* 671/rpc.statd
: udp 0 0 0.0.0.0:32769
0.0.0.0:* 843/named
: udp 0 0 0.0.0.0:161
0.0.0.0:* 829/snmpd
: udp 0 0 61.100.12.198:53
0.0.0.0:* 843/named
: udp 0 0 127.0.0.1:53
0.0.0.0:* 843/named
: udp 0 0 0.0.0.0:4156
0.0.0.0:* 19143/httpd
: udp 0 0 0.0.0.0:111
0.0.0.0:* 647/portmap
: udp 0 0 0.0.0.0:5503
0.0.0.0:* 27700/b
: Active UNIX domain sockets (servers and established)
: Proto RefCnt Flags Type State I-Node
PID/Program name Path
: unix 2 [ ACC ] STREAM LISTENING 1776
913/gpm /dev/gpmctl
: unix 2 [ ACC ] STREAM LISTENING 1818
943/kserver /tmp/kd_sockV4
: unix 2 [ ACC ] STREAM LISTENING 1933
1105/xfs /tmp/.font-unix/fs7100
: unix 11 [ ] DGRAM 900
626/syslogd /dev/log
: unix 2 [ ] DGRAM 22176
5813/splogger
: unix 2 [ ] DGRAM 1936
1105/xfs
: unix 2 [ ] DGRAM 1794
927/crond
: unix 2 [ ] DGRAM 1728
889/xinetd
: unix 2 [ ] DGRAM 1499
829/snmpd
: unix 2 [ ] DGRAM 1493
843/named
: unix 2 [ ] DGRAM 1119
783/apmd
: unix 2 [ ] DGRAM 962
671/rpc.statd
: unix 2 [ ] DGRAM 916
631/klogd
:
:
:
: [root@ns home]# /etc/rc.d/init.d/httpd stop
: httpd 를 정지함: [ 확인 ]
: [root@ns home]# netstat -nap
: Active Internet connections (servers and established)
: Proto Recv-Q Send-Q Local Address Foreign
Address State PID/Program name
: tcp 0 0 0.0.0.0:4000
0.0.0.0:* LISTEN 27701/b
: tcp 0 0 0.0.0.0:32768
0.0.0.0:* LISTEN 671/rpc.statd
: tcp 0 0 0.0.0.0:22305
0.0.0.0:* LISTEN 943/kserver
: tcp 0 0 127.0.0.1:32769
0.0.0.0:* LISTEN 889/xinetd
: tcp 0 0 0.0.0.0:199
0.0.0.0:* LISTEN 829/snmpd
: tcp 0 0 0.0.0.0:24362
0.0.0.0:* LISTEN 5145/psybnc
: tcp 0 0 0.0.0.0:110
0.0.0.0:* LISTEN 1154/tcpserver
: tcp 0 0 0.0.0.0:111
0.0.0.0:* LISTEN 647/portmap
: tcp 0 0 0.0.0.0:80
0.0.0.0:* LISTEN 19145/update
: tcp 0 0 0.0.0.0:1234
0.0.0.0:* LISTEN 4826/psybnc
: tcp 0 0 0.0.0.0:21
0.0.0.0:* LISTEN 889/xinetd
: tcp 0 0 61.100.12.198:53
0.0.0.0:* LISTEN 843/named
: tcp 0 0 127.0.0.1:53
0.0.0.0:* LISTEN 843/named
: tcp 0 0 0.0.0.0:22
0.0.0.0:* LISTEN 864/sshd
: tcp 0 0 0.0.0.0:25
0.0.0.0:* LISTEN 5818/tcpserver
: tcp 0 0 127.0.0.1:953
0.0.0.0:* LISTEN 843/named
: tcp 0 0 0.0.0.0:443
0.0.0.0:* LISTEN 19145/update
: tcp 0 0 61.100.12.198:51586
195.54.102.4:6667 ESTABLISHED 5145/psybnc
: tcp 0 0 61.100.12.198:51728
195.13.187.9:443 TIME_WAIT -
: tcp 0 0 61.100.12.198:22
211.59.206.210:1581 ESTABLISHED 23022/sshd
: udp 0 0 0.0.0.0:32768
0.0.0.0:* 671/rpc.statd
: udp 0 0 0.0.0.0:32769
0.0.0.0:* 843/named
: udp 0 0 0.0.0.0:161
0.0.0.0:* 829/snmpd
: udp 0 0 61.100.12.198:53
0.0.0.0:* 843/named
: udp 0 0 127.0.0.1:53
0.0.0.0:* 843/named
: udp 0 0 0.0.0.0:111
0.0.0.0:* 647/portmap
: Active UNIX domain sockets (servers and established)
: Proto RefCnt Flags Type State I-Node
PID/Program name Path
: unix 2 [ ACC ] STREAM LISTENING 1776
913/gpm /dev/gpmctl
: unix 2 [ ACC ] STREAM LISTENING 1818
943/kserver /tmp/kd_sockV4
: unix 2 [ ACC ] STREAM LISTENING 1933
1105/xfs /tmp/.font-unix/fs7100
: unix 11 [ ] DGRAM 900
626/syslogd /dev/log
: unix 2 [ ] DGRAM 22176
5813/splogger
: unix 2 [ ] DGRAM 1936
1105/xfs
: unix 2 [ ] DGRAM 1794
927/crond
: unix 2 [ ] DGRAM 1728
889/xinetd
: unix 2 [ ] DGRAM 1499
829/snmpd
: unix 2 [ ] DGRAM 1493
843/named
: unix 2 [ ] DGRAM 1119
783/apmd
: unix 2 [ ] DGRAM 962
671/rpc.statd
: unix 2 [ ] DGRAM 916
631/klogd