Subject: Re: Understanding (and disabling) stuff from 'netstat -a'
To: None <netbsd-help@netbsd.org>
From: Christos Zoulas <christos@astron.com>
List: netbsd-help
Date: 05/15/2006 00:26:06
In article <1c42f0e0605141502o5357e61ep93588c86b98d80ea@mail.gmail.com>,
Amadeus Stevenson <amadeus.stevenson@gmail.com> wrote:
>Hello,
>
>Running netstat -a on my system (2.0) shows:
>
># netstat -a
>Active Internet connections (including servers)
>Proto Recv-Q Send-Q  Local Address          Foreign Address        State
>tcp        0     48  10.0.0.3.ssh          xx.xx.xx.xx.1117      ESTABLISHED
>tcp        0      0  *.ftp                  *.*                    LISTEN
>tcp        0      0  *.ssh                 *.*                    LISTEN
>tcp        0      0  *.http                *.*                    LISTEN
>tcp        0      0  *.587                  *.*                    LISTEN
>tcp        0      0  *.smtp                 *.*                    LISTEN
>tcp        0      0  gateway.domain         *.*                    LISTEN
>udp        0      0  *.syslog               *.*
>udp        0      0  localhost.ntp          *.*
>udp        0      0  gateway.ntp            *.*
>udp        0      0  10.0.0.3.ntp           *.*
>udp        0      0  *.ntp                  *.*
>udp        0      0  *.bootps               *.*
>udp        0      0  *.65534                *.*
>udp        0      0  gateway.domain         *.*
>udp        0      0  *.bootpc               *.*
>Active UNIX domain sockets
>...
>
>I was wondering what bootpc,bootps and port 65534 are for, and how I
>can disable them or at least find out what's causing them?
>
>I'm not running any processes that I can link to bootpc, bootps ('ps
>-ax | grep boot' is blank).
>
>/etc/services doesn't have an entry for 65534.

use fstat or lsof to find what process has it open. My guess is that it is
named's...

christos