[ossec-list] Re: ossec-rootcheck found hidden ports -- how can I verify if this is a false positive or not?

[David Vasil <dmvasil@xxxxxxxx>]

Peter M. Abraham wrote:
> Greetings Dave:
> 
> Did you miss seeing
> 
> 3306/tcp open  mysql      MySQL 5.0.45-community-log
> 5001/tcp open  apc-agent  APC PowerChute agent
> 5432/tcp open  postgresql PostgreSQL DB
> 8009/tcp open  ajp13?
> 8080/tcp open  http       Apache httpd
> 8443/tcp open  http       Apache httpd
> 
> Which is above 1024? ;-)
> 
> Thank you.
> 

As I stated in my prior email:

"The default port range for nmap is 1-1024 and any additional ports
defined by the nmap services file."

All of the ports you have listed that are above 1024 are in the default
nmap-services file.  Please 'man nmap' and check out
/usr/share/nmap/nmap-services

-- 
-dave