On Thu, 08 Mar 2018 21:34:31 +0000, Fred Smith wrote:

> Hi.
>
> I upgraded raspbian from jessie to stretch,
> and now I keep getting this in the rkhunter output:
>
> Warning: Hidden ports found:
> Port number: UDP:111 is being used by /sbin/rpcbind Port number: UDP:123
> is being used by /usr/sbin/ntpd Port number: UDP:38243 is being used by
> /usr/bin/transmission-daemon Port number: UDP:51413 is being used by
> /usr/bin/transmission-daemon Port number: UDP:5353 is being used by
> /usr/sbin/avahi-daemon Port number: UDP:60282 is being used by
> /usr/sbin/avahi-daemon Port number: UDP:68 is being used by
> /sbin/dhcpcd5 Port number: UDP:964 is being used by /sbin/rpcbind
>
Do they show up in an "nmap -Pn" scan?

Do you ever run "rkhunter --propupd"?
If so, does that make these Port Number reports go away?


--
Martin    | martin at
Gregorie  | gregorie dot org

--- SoupGate-Win32 v1.05