TIP: Click on subject to list as thread! ANSI
echo: rberrypi
to: FRED SMITH
from: RAY CARTER
date: 2018-03-08 21:49:00
subject: Re: rkhunter hidden ports

On Thu, 08 Mar 2018 21:34:31 +0000, Fred Smith wrote:

> Hi.
>
> I upgraded raspbian from jessie to stretch,
> and now I keep getting this in the rkhunter output:
>
> Warning: Hidden ports found:
> Port number: UDP:111 is being used by /sbin/rpcbind Port number: UDP:123
> is being used by /usr/sbin/ntpd Port number: UDP:38243 is being used by
> /usr/bin/transmission-daemon Port number: UDP:51413 is being used by
> /usr/bin/transmission-daemon Port number: UDP:5353 is being used by
> /usr/sbin/avahi-daemon Port number: UDP:60282 is being used by
> /usr/sbin/avahi-daemon Port number: UDP:68 is being used by
> /sbin/dhcpcd5 Port number: UDP:964 is being used by /sbin/rpcbind
>
> (I am using transmission-daemon and ntpd.)
> Are these 'noise'?

Very likely using ntpd - network time protocol - to set the system time
since rpi has no real time clock (unless you've added one.

transmission, less likely. I believe it is a bittorrent client, so your
could have used it to download some files.

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | FidoUsenet Gateway (3:770/3)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.