The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Port Mon Alert?

Discussion in 'General Discussion' started by arrow02, Apr 5, 2004.

  1. arrow02

    arrow02 Active Member

    Joined:
    Feb 23, 2003
    Messages:
    34
    Likes Received:
    0
    Trophy Points:
    6
    Does anyone know what these alerts mean?
    We are receiving them from our system (about every half hour) but were not sure what the are for.



    ----------------------------------------------------------------
    This is an automated alert generated from xxx.xxxxx.com. This alert is to
    notify the addressed users of new server sockets. New server sockets can
    indicate server-software that has been started on your host, or otherwise
    be an indication to malicious activity. It is advised to review this alert
    and investigate if needed.

    Following is a summary of new Internet Server Sockets:
    > tcp 0 0 XX.XXX.XX.XXX:32530 0.0.0.0:* LISTEN 28979/pure-ftpd (ID

    Following is a summary of a new Unix Domain Sockets:
    no changes to Unix Domain Sockets
     
  2. whizkid

    whizkid Active Member

    Joined:
    Jun 17, 2003
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    This email is being generated from PMON. It is saying that the process "Pure-ftpd" is being run from a different port. This particular process/email can be ignored.

    Rick
    http://www.fatnetwork.net
     
  3. arrow02

    arrow02 Active Member

    Joined:
    Feb 23, 2003
    Messages:
    34
    Likes Received:
    0
    Trophy Points:
    6
    Thanks Rick,

    I was just a little worried because with every email I get it's refering to another port.

    And as far as I know these ports are all blocked by APF.

    Is their a way to know if it is telling me something I really should know about?

    Thanks in Advance,
     
  4. whizkid

    whizkid Active Member

    Joined:
    Jun 17, 2003
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    Yeah, I've written RFX about a configurable service "ignore" list in PMON... but i haven't gotten anything back.

    I actually don't use PMON anymore (mainly because of this very reason)... but I do use APF, BFD, and SIM religiously.

    Should the authors fix this issue, I'd be happy to re-test it again.

    Regards,
    Rick
    http://www.fatnetwork.net
     
  5. arrow02

    arrow02 Active Member

    Joined:
    Feb 23, 2003
    Messages:
    34
    Likes Received:
    0
    Trophy Points:
    6
    Thanks for letting us know.

    We appreciate the help...
     
Loading...

Share This Page