Did not receive the answer from the list, but did some
more digging and found out the java programs belonged
to WBEM (Web-Based Enterprise Management) system.
You can get rid of the by disabling S90wbem in
/etc/init.d/rcX.d/.
Original question follows:
...
I have a fresh x86 Solaris8 install which I am stripping
down to secure it. There are two weird tcp ports answering
on the host and I cant seem to figure out what they are.
5987 open tcp unknown
32768 open tcp unknown
Lsof says they are java programs. I have allready removed
everything which starts any java from /etc/rcX.d/ but they
still appear after rebooting.
Any idea what answers in these ports and where are these
programs started at bootup time?
(tuupola)[temporary][pts/2]/usr/local/src/lsof_4.48#./lsof -i TCP:5987
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 238 root 8u IPv4 0xe14017b0 0t0 TCP *:5987 (LISTEN)
(tuupola)[temporary][pts/2]/usr/local/src/lsof_4.48#./lsof -i TCP:32768
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 238 root 10u IPv4 0xe18119c0 0t0 TCP *:32768 (LISTEN)
(tuupola)[temporary][pts/2]/usr/local/src/lsof_4.48#
-- Mika Tuupola http://www.appelsiini.net/~tuupola/
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:14:05 CDT