4126 17:17:01.759670 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:17:01.761518 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702468 17:17:02.005878 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702468 17:17:02.006949 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702468 17:17:02.016628 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702468 17:17:02.016840 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702469 17:17:02.073179 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702469 17:17:02.073871 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702469 17:17:02.083206 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702469 17:17:02.083394 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702469 17:17:02.092876 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702469 17:17:02.093070 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702469 17:17:02.095364 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702469 17:17:02.097072 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702470 17:17:02.810001 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702470 17:17:02.810713 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702470 17:17:02.820273 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702470 17:17:02.820468 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702470 17:17:02.832171 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702470 17:17:02.832406 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702470 17:17:02.835203 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702470 17:17:02.837281 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:17:03.515585 connect(26, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:17:03.518163 connect(26, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:17:11.807380 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:17:11.808918 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 702483 17:17:11.853488 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702483 17:17:11.854224 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702483 17:17:11.863593 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702483 17:17:11.863788 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702484 17:17:11.919010 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702484 17:17:11.919750 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702484 17:17:11.929231 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702484 17:17:11.929419 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702484 17:17:11.938913 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702484 17:17:11.939108 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702484 17:17:11.941380 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702484 17:17:11.943219 connect(9, {sa_family=AF_INET, sin_port=htons(60219), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 702485 17:17:12.851376 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702485 17:17:12.852242 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702485 17:17:12.862814 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702485 17:17:12.863042 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702485 17:17:12.874121 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702485 17:17:12.874359 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702485 17:17:12.877189 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702485 17:17:12.879847 connect(9, {sa_family=AF_INET, sin_port=htons(60219), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:17:13.762009 connect(22, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:17:13.763361 connect(22, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:17:21.830266 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:17:21.831915 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702502 17:17:21.877076 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702502 17:17:21.877822 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702502 17:17:21.887212 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702502 17:17:21.887409 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702503 17:17:21.943725 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702503 17:17:21.944446 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702503 17:17:21.954350 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702503 17:17:21.954595 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702503 17:17:21.965633 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702503 17:17:21.965880 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702503 17:17:21.968632 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702503 17:17:21.970534 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702504 17:17:22.664334 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702504 17:17:22.665058 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702504 17:17:22.674655 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702504 17:17:22.674858 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702504 17:17:22.684243 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702504 17:17:22.684434 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702504 17:17:22.686715 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702504 17:17:22.688223 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:17:23.366444 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:17:23.367859 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:17:59.873525 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:17:59.875447 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702570 17:17:59.927037 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702570 17:17:59.927908 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702570 17:17:59.938143 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702570 17:17:59.938340 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702571 17:17:59.994877 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702571 17:17:59.995917 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702571 17:18:00.005490 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702571 17:18:00.005686 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702571 17:18:00.015521 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702571 17:18:00.015715 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702571 17:18:00.018004 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702571 17:18:00.019783 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702578 17:18:00.720340 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702578 17:18:00.721079 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702578 17:18:00.731342 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702578 17:18:00.731538 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702578 17:18:00.741191 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702578 17:18:00.741387 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702578 17:18:00.743695 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702578 17:18:00.745940 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:18:01.425038 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:18:01.426590 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:18:15.902447 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:18:15.904409 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702589 17:18:15.950029 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702589 17:18:15.950775 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702589 17:18:15.960136 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702589 17:18:15.960330 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702590 17:18:16.015243 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702590 17:18:16.015977 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702590 17:18:16.026231 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702590 17:18:16.026428 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702590 17:18:16.026502 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702590 17:18:16.036188 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702590 17:18:16.036380 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702590 17:18:16.038673 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702590 17:18:16.040105 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702591 17:18:16.738372 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702591 17:18:16.739127 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702591 17:18:16.748776 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702591 17:18:16.748980 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702591 17:18:16.758636 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702591 17:18:16.758834 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702591 17:18:16.761117 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702591 17:18:16.762941 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:18:17.439455 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:18:17.442478 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:18:59.990045 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:18:59.991781 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702644 17:19:00.037168 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702644 17:19:00.037903 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702644 17:19:00.047271 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702644 17:19:00.047464 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702644 17:19:00.051622 connect(7, {sa_family=AF_LOCAL, sun_path="/var/lib/sss/pipes/nss"}, 110) = 0 702645 17:19:00.108318 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702645 17:19:00.109039 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702645 17:19:00.119136 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702645 17:19:00.119330 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702645 17:19:00.128850 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702645 17:19:00.129042 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702645 17:19:00.131306 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702645 17:19:00.133162 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702646 17:19:00.838689 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702646 17:19:00.839420 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702646 17:19:00.849006 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702646 17:19:00.849204 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702646 17:19:00.858806 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702646 17:19:00.859000 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702646 17:19:00.861278 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702646 17:19:00.863977 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:19:01.546551 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:19:01.548454 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:19:48.042942 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:19:48.044763 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702695 17:19:48.090139 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702695 17:19:48.090879 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702695 17:19:48.100295 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702695 17:19:48.100490 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702696 17:19:48.157026 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702696 17:19:48.157890 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702696 17:19:48.167922 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702696 17:19:48.168115 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702696 17:19:48.177616 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702696 17:19:48.177809 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702696 17:19:48.180072 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702696 17:19:48.181800 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702697 17:19:48.883305 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702697 17:19:48.884051 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702697 17:19:48.893763 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702697 17:19:48.893962 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702697 17:19:48.903588 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702697 17:19:48.903788 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702697 17:19:48.906091 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702697 17:19:48.908679 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:19:49.584922 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:19:49.587255 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:20:34.096600 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:20:34.098472 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702715 17:20:34.344849 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702715 17:20:34.346035 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702715 17:20:34.356559 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702715 17:20:34.356761 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702716 17:20:34.414612 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702716 17:20:34.415334 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702716 17:20:34.424970 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702716 17:20:34.425166 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702716 17:20:34.434684 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702716 17:20:34.434876 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702716 17:20:34.437154 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702716 17:20:34.438899 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702717 17:20:35.141340 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702717 17:20:35.142117 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702717 17:20:35.151700 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702717 17:20:35.151899 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702717 17:20:35.161402 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702717 17:20:35.161604 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702717 17:20:35.163902 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702717 17:20:35.165781 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:20:35.845124 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:20:35.846612 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:21:00.150799 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:21:00.152718 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702742 17:21:00.200279 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702742 17:21:00.201022 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702742 17:21:00.210561 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702742 17:21:00.210757 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702743 17:21:00.267386 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702743 17:21:00.268146 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702743 17:21:00.278350 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702743 17:21:00.278602 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702743 17:21:00.289804 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702743 17:21:00.290037 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702743 17:21:00.292796 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702743 17:21:00.295201 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702744 17:21:01.000292 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702744 17:21:01.001178 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702744 17:21:01.011770 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702744 17:21:01.012024 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702744 17:21:01.023151 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702744 17:21:01.023384 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702744 17:21:01.026173 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702744 17:21:01.028772 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:21:01.707132 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:21:01.709581 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:21:13.385772 connect(19, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:21:13.387016 connect(19, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 702760 17:21:13.432091 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702760 17:21:13.432825 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702760 17:21:13.442248 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702760 17:21:13.442444 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702761 17:21:13.503922 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702761 17:21:13.504801 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702761 17:21:13.513249 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702761 17:21:13.513496 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702762 17:21:13.596720 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702762 17:21:13.597453 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702762 17:21:13.605222 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702762 17:21:13.605417 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702763 17:21:13.679234 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702763 17:21:13.679990 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702763 17:21:13.687816 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702763 17:21:13.688009 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702765 17:21:13.753379 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702765 17:21:13.753441 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702765 17:21:13.753682 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702765 17:21:13.753736 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.773824 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702766 17:21:13.773874 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.774108 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702766 17:21:13.774157 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.777242 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 702766 17:21:13.777410 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 702766 17:21:13.782116 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 702766 17:21:13.783176 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 702766 17:21:13.783335 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 702766 17:21:13.786033 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 702766 17:21:13.786211 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 702766 17:21:13.786881 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 702766 17:21:13.788144 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 702766 17:21:13.789495 read(4, "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 702766 17:21:13.792075 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 702766 17:21:13.794357 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 702766 17:21:13.794699 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 702766 17:21:13.795542 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 702766 17:21:13.796023 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 702766 17:21:13.798058 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 702766 17:21:13.799390 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 702766 17:21:13.801251 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 702766 17:21:13.802475 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 702766 17:21:13.804156 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702766 17:21:13.804207 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.804412 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702766 17:21:13.804462 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.810550 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702766 17:21:13.810601 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.810817 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702766 17:21:13.810867 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702766 17:21:13.814900 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 702766 17:21:13.814957 <... connect resumed> ) = 0 702766 17:21:13.816315 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 702766 17:21:13.816594 <... connect resumed> ) = 0 702767 17:21:13.830593 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702767 17:21:13.830648 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702767 17:21:13.830885 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702767 17:21:13.830938 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702767 17:21:13.843831 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702767 17:21:13.844022 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702767 17:21:13.848545 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702767 17:21:13.850155 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 702767 17:21:13.851257 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702767 17:21:13.851556 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702768 17:21:13.894882 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702768 17:21:13.895075 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702769 17:21:13.923401 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:21:14.033376 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:21:14.036004 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:22:42.269796 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:22:42.271607 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:24:02.554732 connect(16, {sa_family=AF_LOCAL, sun_path="/var/lib/sss/pipes/nss"}, 110) = 0 4126 17:24:02.898452 connect(18, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:24:02.901055 connect(18, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:24:03.061435 connect(17, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702841 17:24:03.146430 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702841 17:24:03.147196 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702841 17:24:03.156789 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702841 17:24:03.156998 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702842 17:24:03.219755 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702842 17:24:03.220624 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702842 17:24:03.228964 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702842 17:24:03.229175 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702843 17:24:03.307296 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702843 17:24:03.308017 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702843 17:24:03.315781 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702843 17:24:03.315974 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702844 17:24:03.389771 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702844 17:24:03.390489 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702844 17:24:03.398665 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702844 17:24:03.398862 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702845 17:24:03.462903 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702845 17:24:03.462950 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702845 17:24:03.463176 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702845 17:24:03.463236 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.481856 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702846 17:24:03.481906 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.482127 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702846 17:24:03.482175 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.485350 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 702846 17:24:03.485537 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 702846 17:24:03.490240 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 702846 17:24:03.491250 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 702846 17:24:03.491429 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 702846 17:24:03.494044 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 702846 17:24:03.494217 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 702846 17:24:03.494882 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 702846 17:24:03.496101 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 702846 17:24:03.497557 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 702846 17:24:03.500191 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 702846 17:24:03.502445 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 702846 17:24:03.502795 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 702846 17:24:03.503667 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 702846 17:24:03.504170 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 702846 17:24:03.506223 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 702846 17:24:03.507595 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 702846 17:24:03.509471 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 702846 17:24:03.510678 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 702846 17:24:03.512355 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702846 17:24:03.512404 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.512622 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702846 17:24:03.512674 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.518686 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702846 17:24:03.518712 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.518826 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702846 17:24:03.518851 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702846 17:24:03.520948 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 702846 17:24:03.520976 <... connect resumed> ) = 0 702846 17:24:03.522083 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 702846 17:24:03.522492 <... connect resumed> ) = 0 702847 17:24:03.534473 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702847 17:24:03.534543 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702847 17:24:03.534756 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702847 17:24:03.534806 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702847 17:24:03.545489 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702847 17:24:03.545690 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702847 17:24:03.550266 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702847 17:24:03.552050 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 702847 17:24:03.553094 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702847 17:24:03.553303 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702848 17:24:03.597246 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702848 17:24:03.597484 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702849 17:24:03.626910 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:24:03.743034 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:24:03.744698 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:24:44.409549 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:24:44.412165 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:25:02.566914 connect(20, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:25:02.568350 connect(20, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702857 17:25:02.614251 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702857 17:25:02.615005 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702857 17:25:02.624816 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702857 17:25:02.625014 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702858 17:25:02.683579 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702858 17:25:02.684298 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702858 17:25:02.692301 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702858 17:25:02.692504 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702859 17:25:02.773230 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702859 17:25:02.774102 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702859 17:25:02.782525 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702859 17:25:02.782770 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702860 17:25:02.862145 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702860 17:25:02.862867 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702860 17:25:02.870617 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702860 17:25:02.870810 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702861 17:25:02.937652 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702861 17:25:02.937687 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702861 17:25:02.937828 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702861 17:25:02.937861 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.952788 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702862 17:25:02.952814 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.952930 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702862 17:25:02.952955 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.954625 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 702862 17:25:02.954693 read(4, " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 702862 17:25:02.957236 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 702862 17:25:02.957790 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 702862 17:25:02.957873 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 702862 17:25:02.959265 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 702862 17:25:02.959356 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 702862 17:25:02.959704 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 702862 17:25:02.960363 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 702862 17:25:02.961110 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 702862 17:25:02.962510 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 702862 17:25:02.963693 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 702862 17:25:02.963865 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 702862 17:25:02.964311 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 702862 17:25:02.964571 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 702862 17:25:02.965645 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 702862 17:25:02.966348 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 702862 17:25:02.967344 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 702862 17:25:02.967970 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 702862 17:25:02.968850 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702862 17:25:02.968878 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.968981 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702862 17:25:02.969007 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.972182 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702862 17:25:02.972208 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.972322 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702862 17:25:02.972355 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702862 17:25:02.974456 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 702862 17:25:02.974485 <... connect resumed> ) = 0 702862 17:25:02.975688 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 702862 17:25:02.975924 <... connect resumed> ) = 0 702863 17:25:02.987359 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702863 17:25:02.987552 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702863 17:25:02.997980 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702863 17:25:02.998173 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702863 17:25:03.002727 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702863 17:25:03.004533 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 702863 17:25:03.005626 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702863 17:25:03.005824 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702864 17:25:03.055033 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702864 17:25:03.055229 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702865 17:25:03.084372 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:25:03.201127 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:25:03.203119 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:25:10.455049 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:25:10.456808 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702870 17:25:10.501032 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702870 17:25:10.501777 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702870 17:25:10.510503 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702870 17:25:10.510701 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702871 17:25:10.567694 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702871 17:25:10.568419 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702871 17:25:10.578415 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702871 17:25:10.578485 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702871 17:25:10.578718 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702871 17:25:10.588306 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702871 17:25:10.588506 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702871 17:25:10.590801 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702871 17:25:10.592575 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702872 17:25:11.291998 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702872 17:25:11.292716 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702872 17:25:11.302345 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702872 17:25:11.302549 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702872 17:25:11.311971 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702872 17:25:11.312163 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702872 17:25:11.314412 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702872 17:25:11.316182 connect(9, {sa_family=AF_INET, sin_port=htons(20897), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:25:11.994400 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:25:11.995847 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:26:44.619708 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:26:44.621490 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:28:08.653509 connect(19, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:28:08.656219 connect(19, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:28:08.675906 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 4126 17:28:08.675964 <... connect resumed> ) = 0 4126 17:28:08.677938 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16 4126 17:28:08.678029 <... connect resumed> ) = -1 EINPROGRESS (Operation now in progress) 702902 17:28:08.937707 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 702902 17:28:08.937770 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 702902 17:28:08.938864 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702903 17:28:08.949969 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 702902 17:28:08.949998 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702903 17:28:08.950028 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 702902 17:28:08.950057 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702902 17:28:08.950292 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702902 17:28:08.950351 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702903 17:28:08.951106 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702903 17:28:08.960366 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702903 17:28:08.960422 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702903 17:28:08.960678 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702903 17:28:08.960726 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702904 17:28:09.025678 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 702904 17:28:09.025729 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 702904 17:28:09.027014 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702905 17:28:09.032748 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 702905 17:28:09.032862 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 702905 17:28:09.034034 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702904 17:28:09.036567 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702904 17:28:09.036891 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702905 17:28:09.044062 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702905 17:28:09.044330 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702906 17:28:09.228624 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702906 17:28:09.229351 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702906 17:28:09.237122 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702906 17:28:09.237317 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702907 17:28:09.312147 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702907 17:28:09.312874 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702907 17:28:09.320778 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702907 17:28:09.320974 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702908 17:28:09.384398 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702908 17:28:09.384451 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702908 17:28:09.384664 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702908 17:28:09.384715 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.403196 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702909 17:28:09.403251 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.403470 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702909 17:28:09.403528 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.406681 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 702909 17:28:09.406848 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 702909 17:28:09.411624 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 702909 17:28:09.412662 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 702909 17:28:09.412845 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 702909 17:28:09.415459 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 702909 17:28:09.415649 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 702909 17:28:09.416348 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 702909 17:28:09.417653 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 702909 17:28:09.419051 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 702909 17:28:09.421655 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 702909 17:28:09.423892 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 702909 17:28:09.424223 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 702909 17:28:09.425051 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 702909 17:28:09.425554 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 702909 17:28:09.427560 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 702909 17:28:09.428936 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 702909 17:28:09.430696 read(4, " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 702909 17:28:09.431884 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 702909 17:28:09.433578 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702909 17:28:09.433630 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.433851 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702909 17:28:09.433900 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.440110 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702909 17:28:09.440160 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.440395 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702909 17:28:09.440444 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702909 17:28:09.444442 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 702909 17:28:09.444503 <... connect resumed> ) = 0 702909 17:28:09.445939 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 702909 17:28:09.446234 <... connect resumed> ) = 0 702910 17:28:09.458898 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702910 17:28:09.458952 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702910 17:28:09.459144 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702910 17:28:09.459195 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702910 17:28:09.471644 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702910 17:28:09.471895 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702910 17:28:09.477668 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702910 17:28:09.479577 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 702910 17:28:09.480675 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702910 17:28:09.480878 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702911 17:28:09.533019 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702911 17:28:09.533217 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702912 17:28:09.561587 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:28:09.673420 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:28:09.676123 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 702913 17:28:10.229880 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702913 17:28:10.230628 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702913 17:28:10.238378 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702913 17:28:10.238578 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702914 17:28:10.309267 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702914 17:28:10.309999 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702914 17:28:10.317753 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702914 17:28:10.317947 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702915 17:28:10.383900 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702915 17:28:10.383969 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702915 17:28:10.384208 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702915 17:28:10.384289 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.398864 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702916 17:28:10.398896 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.399044 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702916 17:28:10.399076 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.401098 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 702916 17:28:10.401203 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 702916 17:28:10.404205 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 702916 17:28:10.404854 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 702916 17:28:10.404969 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 702916 17:28:10.406643 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 702916 17:28:10.406747 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 702916 17:28:10.407168 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 702916 17:28:10.407966 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 702916 17:28:10.408867 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 702916 17:28:10.410486 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 702916 17:28:10.411882 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 702916 17:28:10.412089 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 702916 17:28:10.412630 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 702916 17:28:10.412935 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 702916 17:28:10.414198 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 702916 17:28:10.415049 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 702916 17:28:10.416252 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 702916 17:28:10.417016 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 702916 17:28:10.418062 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702916 17:28:10.418095 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.418231 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702916 17:28:10.418262 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.422128 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702916 17:28:10.422163 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.422290 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 702916 17:28:10.422323 <... connect resumed> ) = -1 ENOENT (No such file or directory) 702916 17:28:10.424855 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 702916 17:28:10.424888 <... connect resumed> ) = 0 702916 17:28:10.426168 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 702916 17:28:10.426433 <... connect resumed> ) = 0 702917 17:28:10.439104 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702917 17:28:10.439304 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702917 17:28:10.448078 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702917 17:28:10.448200 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702917 17:28:10.451028 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702917 17:28:10.452153 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 702917 17:28:10.452879 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702917 17:28:10.453006 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702918 17:28:10.484573 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702918 17:28:10.484765 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702919 17:28:10.512293 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:28:10.624271 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:28:10.625752 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:28:12.737386 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:28:12.740079 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 702924 17:28:12.785576 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702924 17:28:12.786322 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702924 17:28:12.795808 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702924 17:28:12.796006 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702925 17:28:12.853250 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702925 17:28:12.853987 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702925 17:28:12.863548 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702925 17:28:12.863746 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702925 17:28:12.873300 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702925 17:28:12.873501 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702925 17:28:12.875798 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702925 17:28:12.877489 connect(9, {sa_family=AF_INET, sin_port=htons(60219), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 702926 17:28:13.788523 connect(3, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 702926 17:28:13.789440 read(3, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 702926 17:28:13.800299 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702926 17:28:13.800548 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702926 17:28:13.812027 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702926 17:28:13.812290 connect(9, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 702926 17:28:13.815160 connect(9, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 702926 17:28:13.817583 connect(9, {sa_family=AF_INET, sin_port=htons(60219), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:28:14.699738 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:28:14.701277 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:28:46.807091 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:28:46.809600 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:28:46.818813 connect(18, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:28:46.820998 connect(18, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:29:03.484890 connect(16, {sa_family=AF_LOCAL, sun_path="/var/lib/sss/pipes/nss"}, 110) = 0 4126 17:29:47.420649 connect(19, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:29:47.422360 connect(19, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:29:47.441383 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 4126 17:29:47.441442 <... connect resumed> ) = 0 4126 17:29:47.443497 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16 4126 17:29:47.443630 <... connect resumed> ) = -1 EINPROGRESS (Operation now in progress) 703025 17:29:47.691486 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 703025 17:29:47.691512 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 703025 17:29:47.692062 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703026 17:29:47.695380 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703026 17:29:47.695813 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703025 17:29:47.700897 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703025 17:29:47.701123 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703026 17:29:47.704467 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703026 17:29:47.704528 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703026 17:29:47.704756 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703026 17:29:47.704803 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703027 17:29:47.763403 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 703027 17:29:47.763439 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 703028 17:29:47.763450 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 703028 17:29:47.763483 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 703027 17:29:47.764068 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703028 17:29:47.764102 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703028 17:29:47.773591 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703027 17:29:47.773635 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703028 17:29:47.773670 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703027 17:29:47.773708 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703028 17:29:47.773942 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703027 17:29:47.773976 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703028 17:29:47.774011 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703027 17:29:47.774045 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703029 17:29:47.862518 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703029 17:29:47.863246 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703029 17:29:47.871143 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703029 17:29:47.871351 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703030 17:29:47.947714 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703030 17:29:47.948429 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703030 17:29:47.956188 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703030 17:29:47.956384 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703031 17:29:48.022183 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703031 17:29:48.022238 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703031 17:29:48.022502 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703031 17:29:48.022557 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703032 17:29:48.043537 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703032 17:29:48.043616 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703032 17:29:48.043839 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703032 17:29:48.043889 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703032 17:29:48.046987 read(4, "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 703032 17:29:48.047195 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 703032 17:29:48.051867 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 703032 17:29:48.052887 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 703032 17:29:48.053072 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 703032 17:29:48.055668 read(4, "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 703032 17:29:48.055864 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 703032 17:29:48.056541 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 703032 17:29:48.057832 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 703032 17:29:48.059284 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 703032 17:29:48.061928 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 703032 17:29:48.064262 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 703032 17:29:48.064608 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 703032 17:29:48.065469 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 703032 17:29:48.065988 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 703032 17:29:48.068035 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 703032 17:29:48.069388 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 703032 17:29:48.071237 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 703032 17:29:48.072464 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 703032 17:29:48.074152 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703032 17:29:48.074221 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703032 17:29:48.074438 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703032 17:29:48.074501 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703032 17:29:48.080755 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703032 17:29:48.080804 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703032 17:29:48.081024 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703032 17:29:48.085162 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 703032 17:29:48.085216 <... connect resumed> ) = 0 703032 17:29:48.086700 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 703032 17:29:48.087026 <... connect resumed> ) = 0 703033 17:29:48.094692 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703033 17:29:48.094721 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703033 17:29:48.094827 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703033 17:29:48.094853 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703033 17:29:48.103464 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703033 17:29:48.103672 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703033 17:29:48.108401 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 703033 17:29:48.110446 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 703033 17:29:48.111082 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703033 17:29:48.111279 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703034 17:29:48.146940 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703034 17:29:48.147134 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703035 17:29:48.175058 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:29:48.286114 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:29:48.288613 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 703036 17:29:48.866323 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703036 17:29:48.867073 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703036 17:29:48.874870 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703036 17:29:48.875064 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703037 17:29:48.951062 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703037 17:29:48.952073 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703037 17:29:48.959944 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703037 17:29:48.960141 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703038 17:29:49.023853 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703038 17:29:49.023906 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703038 17:29:49.024119 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703038 17:29:49.024169 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.039122 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703039 17:29:49.039166 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.039327 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703039 17:29:49.039367 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.041951 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 703039 17:29:49.042089 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 703039 17:29:49.045887 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 703039 17:29:49.046715 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 703039 17:29:49.046846 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 703039 17:29:49.048965 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 703039 17:29:49.049111 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 703039 17:29:49.049653 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 703039 17:29:49.050639 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 703039 17:29:49.051805 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 703039 17:29:49.053900 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 703039 17:29:49.055730 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 703039 17:29:49.056001 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 703039 17:29:49.056698 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 703039 17:29:49.057125 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 703039 17:29:49.058778 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 703039 17:29:49.059859 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 703039 17:29:49.061390 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 703039 17:29:49.062371 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 703039 17:29:49.063691 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703039 17:29:49.063735 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.063905 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703039 17:29:49.063947 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.068433 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703039 17:29:49.068458 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.068578 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703039 17:29:49.068603 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703039 17:29:49.070711 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 703039 17:29:49.070739 <... connect resumed> ) = 0 703039 17:29:49.071836 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 703039 17:29:49.072067 <... connect resumed> ) = 0 703040 17:29:49.085375 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703040 17:29:49.085579 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703040 17:29:49.095801 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703040 17:29:49.095996 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703040 17:29:49.100593 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 703040 17:29:49.102385 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 703040 17:29:49.103487 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703040 17:29:49.103690 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703041 17:29:49.139548 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703041 17:29:49.139752 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703042 17:29:49.172029 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:29:49.295397 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:29:49.297105 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:30:46.209633 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:30:46.211847 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:30:46.220437 connect(18, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:30:46.222378 connect(18, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:31:20.911081 connect(19, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:31:20.912316 connect(19, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:31:20.931194 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 4126 17:31:20.931270 <... connect resumed> ) = 0 4126 17:31:20.933251 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16 4126 17:31:20.933331 <... connect resumed> ) = -1 EINPROGRESS (Operation now in progress) 703087 17:31:21.200963 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 703087 17:31:21.201021 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 703087 17:31:21.202106 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703086 17:31:21.202864 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703086 17:31:21.203591 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703087 17:31:21.212469 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703087 17:31:21.212534 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703087 17:31:21.212763 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703086 17:31:21.213902 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703086 17:31:21.213957 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703086 17:31:21.214174 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703086 17:31:21.214227 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703089 17:31:21.278535 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 703088 17:31:21.278550 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6 703089 17:31:21.278564 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 703088 17:31:21.278578 <... connect resumed> ) = -1 ECONNREFUSED (Connection refused) 703089 17:31:21.279061 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703088 17:31:21.279091 <... read resumed> "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703089 17:31:21.285739 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703089 17:31:21.285765 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703088 17:31:21.285828 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703088 17:31:21.285854 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703089 17:31:21.285887 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703089 17:31:21.285914 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703088 17:31:21.285968 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703088 17:31:21.285995 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703091 17:31:21.368233 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703091 17:31:21.368965 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703091 17:31:21.376727 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703091 17:31:21.376935 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703092 17:31:21.455393 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703092 17:31:21.456119 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703092 17:31:21.464152 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703092 17:31:21.464350 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703093 17:31:21.531315 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703093 17:31:21.531376 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703093 17:31:21.531610 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703093 17:31:21.531665 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.551433 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703094 17:31:21.551490 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.551711 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703094 17:31:21.551761 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.554940 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 703094 17:31:21.555108 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 703094 17:31:21.559864 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 703094 17:31:21.560928 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 703094 17:31:21.561091 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 703094 17:31:21.563685 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 703094 17:31:21.563855 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 703094 17:31:21.564530 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 703094 17:31:21.565826 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 703094 17:31:21.567223 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 703094 17:31:21.569867 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 703094 17:31:21.572197 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 703094 17:31:21.572564 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 703094 17:31:21.573428 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 703094 17:31:21.573978 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 703094 17:31:21.576104 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 703094 17:31:21.577527 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 703094 17:31:21.579416 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 703094 17:31:21.580657 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 703094 17:31:21.582364 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703094 17:31:21.582410 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.582638 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703094 17:31:21.582686 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.587761 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703094 17:31:21.587787 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.587908 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703094 17:31:21.587934 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703094 17:31:21.590040 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 703094 17:31:21.590069 <... connect resumed> ) = 0 703094 17:31:21.591181 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 703094 17:31:21.591528 <... connect resumed> ) = 0 703095 17:31:21.604157 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703095 17:31:21.604356 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703095 17:31:21.614606 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703095 17:31:21.614800 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703095 17:31:21.619337 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 703095 17:31:21.621136 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 703095 17:31:21.622325 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703095 17:31:21.622539 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703096 17:31:21.662172 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703096 17:31:21.662363 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703097 17:31:21.690448 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:31:21.801561 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:31:21.803336 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 703098 17:31:22.374427 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703098 17:31:22.375159 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703098 17:31:22.383055 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703098 17:31:22.383250 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703099 17:31:22.456061 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703099 17:31:22.456788 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703099 17:31:22.464660 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703099 17:31:22.464858 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703100 17:31:22.530752 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703100 17:31:22.530813 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703100 17:31:22.531039 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703100 17:31:22.531094 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.551090 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703101 17:31:22.551143 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.551344 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703101 17:31:22.551393 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.554540 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 703101 17:31:22.554722 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 703101 17:31:22.559465 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 703101 17:31:22.560523 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 703101 17:31:22.560712 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 703101 17:31:22.563303 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 703101 17:31:22.563481 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 703101 17:31:22.564204 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 703101 17:31:22.565451 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 703101 17:31:22.566885 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 703101 17:31:22.569502 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 703101 17:31:22.571741 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 703101 17:31:22.572065 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 703101 17:31:22.572914 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 703101 17:31:22.573411 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 703101 17:31:22.575408 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 703101 17:31:22.576742 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 703101 17:31:22.578622 read(4, " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 703101 17:31:22.579765 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 703101 17:31:22.581368 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703101 17:31:22.581421 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.581617 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703101 17:31:22.581667 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.587196 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703101 17:31:22.587223 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.587344 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703101 17:31:22.587370 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703101 17:31:22.589442 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 703101 17:31:22.589471 <... connect resumed> ) = 0 703101 17:31:22.590666 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 703101 17:31:22.591114 <... connect resumed> ) = 0 703102 17:31:22.598696 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703102 17:31:22.598724 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703102 17:31:22.598850 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703102 17:31:22.598878 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703102 17:31:22.607362 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703102 17:31:22.607582 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703102 17:31:22.612202 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 703102 17:31:22.614196 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 703102 17:31:22.615318 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703102 17:31:22.615437 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703103 17:31:22.669452 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703103 17:31:22.669643 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703104 17:31:22.697982 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:31:22.808163 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:31:22.809866 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:32:31.992515 connect(18, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:32:31.995123 connect(18, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 703115 17:32:32.242018 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703115 17:32:32.242921 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703115 17:32:32.252985 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703115 17:32:32.253184 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703116 17:32:32.314782 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703116 17:32:32.315706 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703116 17:32:32.324261 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703116 17:32:32.324464 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703117 17:32:32.407429 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703117 17:32:32.408168 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703117 17:32:32.415957 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703117 17:32:32.416151 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703118 17:32:32.488133 connect(5, {sa_family=AF_LOCAL, sun_path="/tmp"}, 6) = -1 ECONNREFUSED (Connection refused) 703118 17:32:32.489012 read(5, "# Flag to choose SSL or TLS for GSSAPI protocol.\n# Set to true to disable SSLv3, or false to allow either to be \n# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n# variable overrides this\nFORCE_TLS=false\n# GSSAPI Name compatibility mode when trying to determine\n# if a host certificate is legitimate. GSI predates RFC2818,\n# so there are some old, less-secure, practices by default.\n# The different modes are:\n# STRICT_GT2:\n# Strictly backward-compatible with GT 2.0 name matching. \n# X.509 subjectAltName values are ignored. Names with\n# hyphens are treated as wildcarded such that \n# host-ANYTHING.example.com will match a certificate named\n# host.example.com. The name matching will rely on canonical\n# host (as resolved via getnameinfo) name associated with\n# a connection's IP addresses.\n# STRICT_RFC2818:\n# Support RFC 2818 server identity processing. Hyphen \n# characters are treated as normal part of a host name. \n# dnsName and ipAddress subjectAltName extensions are matched\n# against the host and port passed to GSSAPI. If subjectAltName \n# is present, X.509 SubjectName is ignored. \n# HYBRID:\n# Support a hybrid of the two previous name matching algorithms,\n# liberally matching both hyphen wildcards, canonical names\n# associated with IP addresses, and subjectAltName extensions.\n# This has been the default since GT 4.2\nNAME_COMPATIBILITY=STRICT_RFC2818\n# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n# names. \nCIPHERS=HIGH\n# If true, when choosing a cipher, a server will use its own preferred\n# order instead of the cipher order presented by the client. When not set, the\n# SSL server will always follow the clients preferences.\nSERVER_CIPHER_ORDER=true\n", 1781) = 1781 703118 17:32:32.496943 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703118 17:32:32.497136 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703119 17:32:32.561277 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703119 17:32:32.561328 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703119 17:32:32.561548 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703119 17:32:32.561597 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.577378 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703120 17:32:32.577405 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.577588 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703120 17:32:32.577634 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.580516 <... read resumed> "a-cluster 694/tcp # Heartbeat HA-cluster\nha-cluster 694/udp # Heartbeat HA-cluster\nkerberos-adm 749/tcp # Kerberos `kadmin' (v5)\nkerberos-adm 749/udp # kerberos administration\nkerberos-iv 750/udp kerberos4 kerberos-sec kdc loadav\nkerberos-iv 750/tcp kerberos4 kerberos-sec kdc rfile\nwebster 765/tcp # Network dictionary\nwebster 765/udp\nphonebook 767/tcp # Network phonebook\nphonebook 767/udp\nrsync 873/tcp # rsync\nrsync 873/udp # rsync\nrquotad 875/tcp # rquota daemon\nrquotad 875/udp # rquota daemon\ntelnets 992/tcp\ntelnets 992/udp\nimaps 993/tcp # IMAP over SSL\nimaps 993/udp # IMAP over SSL\nircs 994/tcp\nircs 994/udp\npop3s 995/tcp # POP-3 over SSL\npop3s 995/udp # POP-3 over SSL\n\n#\n# UNIX specific services\n#\nexec 512/tcp\nbiff 512/udp comsat\nlogin 513/tcp\nwho 513/udp whod\nshell 514/tcp cmd # no passwords used\nsyslog 514/udp\nprinter 515/tcp spooler # line printer spooler\nprinter 515/udp spooler # line printer spooler\ntalk 517/udp\nntalk 518/udp\nutime 519/tcp unixtime\nutime 519/udp unixtime\nefs 520/tcp\nrouter 520/udp route routed # RIP\nripng 521/tcp\nripng 521/udp\ntimed 525/tcp timeserver\ntimed 525/udp timeserver\ntempo 526/tcp newdate\ncourier 530/tcp rpc\nconference 531/tcp chat\nnetnews 532/tcp\nnetwall 533/udp # -for emergency broadcasts\nuucp 540/tcp uucpd # uucp daemon\nklogin 543/tcp # Kerberized `rlogin' (v5)\nkshell 544/tcp krcmd # Kerberized `rsh' (v5)\nafpovertcp 548/tcp # AFP over TCP\nafpovertcp 548/udp # AFP over TCP\nremotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem\n\n#\n# From ``PORT NUMBERS'':\n#\n#>REGISTERED PORT NUMBERS\n#>\n#>The Registered Ports are listed by the IANA and on most systems can be\n#>used by ordinary user processes or programs executed by ordinary\n#>users.\n#>\n#>Ports are used in the TCP [RFC793] to name the ends of logical\n#>connections which carry long term conversations. For the purpose of\n#>providing services to unknown callers, a service contact port is\n#>defined. This list specifies the port used by the server process as\n#>its contact port.\n#>\n#>The IANA registers uses of these ports as a convienence to the\n#>community.\n#\nsocks 1080/tcp # socks proxy server\nsocks 1080/udp # socks proxy server\n\n# Port 1236 is registered as `bvcontrol', but is also used by the\n# Gracilis Packeten remote config server. The official name is listed as\n# the primary name, with the unregistered name as an alias.\nbvcontrol 1236/tcp rmtcfg # Daniel J. Walsh, Gracilis Packeten remote config server\nbvcontrol 1236/udp # Daniel J. Walsh\n\nh323hostcallsc 1300/tcp # H323 Host Call Secure\nh323hostcallsc 1300/udp # H323 Host Call Secure\nms-sql-s 1433/tcp # Microsoft-SQL-Server\nms-sql-s 1433/udp # Microsoft-SQL-Server\nms-sql-m 1434/tcp # Microsoft-SQL-Monitor\nms-sql-m 1434/udp # Microsoft-SQL-Monitor\nica ", 4096) = 4096 703120 17:32:32.580695 <... read resumed> " 1494/tcp # Citrix ICA Client\nica 1494/udp # Citrix ICA Client\nwins 1512/tcp # Microsoft's Windows Internet Name Service\nwins 1512/udp # Microsoft's Windows Internet Name Service\ningreslock 1524/tcp\ningreslock 1524/udp\nprospero-np 1525/tcp orasrv # Prospero non-privileged/oracle\nprospero-np 1525/udp orasrv\ndatametrics 1645/tcp old-radius sightline # datametrics / old radius entry\ndatametrics 1645/udp old-radius sightline # datametrics / old radius entry\nsa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry\nsa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry\nkermit 1649/tcp\nkermit 1649/udp\nl2tp 1701/tcp l2f\nl2tp 1701/udp l2f\nh323gatedisc 1718/tcp\nh323gatedisc 1718/udp\nh323gatestat 1719/tcp\nh323gatestat 1719/udp\nh323hostcall 1720/tcp\nh323hostcall 1720/udp\ntftp-mcast 1758/tcp\ntftp-mcast 1758/udp\nmtftp 1759/udp spss-lm\nhello 1789/tcp\nhello 1789/udp\nradius 1812/tcp # Radius\nradius 1812/udp # Radius\nradius-acct 1813/tcp radacct # Radius Accounting\nradius-acct 1813/udp radacct # Radius Accounting\nmtp 1911/tcp #\nmtp 1911/udp #\nhsrp 1985/tcp # Cisco Hot Standby Router Protocol\nhsrp 1985/udp # Cisco Hot Standby Router Protocol\nlicensedaemon 1986/tcp\nlicensedaemon 1986/udp\ngdp-port 1997/tcp # Cisco Gateway Discovery Protocol\ngdp-port 1997/udp # Cisco Gateway Discovery Protocol\nsieve-filter 2000/tcp cisco-sccp # Sieve Mail Filter Daemon\nsieve-filter 2000/udp cisco-sccp # Sieve Mail Filter Daemon\nnfs 2049/tcp nfsd shilp # Network File System\nnfs 2049/udp nfsd shilp # Network File System\nnfs 2049/sctp nfsd shilp # Network File System\nzephyr-srv 2102/tcp # Zephyr server\nzephyr-srv 2102/udp # Zephyr server\nzephyr-clt 2103/tcp # Zephyr serv-hm connection\nzephyr-clt 2103/udp # Zephyr serv-hm connection\nzephyr-hm 2104/tcp # Zephyr hostmanager\nzephyr-hm 2104/udp # Zephyr hostmanager\ncvspserver 2401/tcp # CVS client/server operations\ncvspserver 2401/udp # CVS client/server operations\nvenus 2430/tcp # codacon port\nvenus 2430/udp # Venus callback/wbc interface\nvenus-se 2431/tcp # tcp side effects\nvenus-se 2431/udp # udp sftp side effect\ncodasrv 2432/tcp # not used\ncodasrv 2432/udp # server port\ncodasrv-se 2433/tcp # tcp side effects\ncodasrv-se 2433/udp # udp sftp side effectQ\n\n# Ports numbered 2600 through 2606 are used by the zebra package without\n# being registred. The primary names are the registered names, and the\n# unregistered names used by zebra are listed as aliases.\nhpstgmgr 2600/tcp zebrasrv # HPSTGMGR\nhpstgmgr 2600/udp # HPSTGMGR\ndiscp-client 2601/tcp zebra # discp client\ndiscp-client 2601/udp # discp client\ndiscp-server 2602/tcp ripd # discp server\ndiscp-server 2602/udp # discp server\nservicemeter 2603/tcp ripngd # Service Meter\nservicemeter 2", 4096) = 4096 703120 17:32:32.585053 <... read resumed> "ware-1\nci3-software-1 1301/udp # CI3-Software-1\nci3-software-2 1302/tcp # CI3-Software-2\nci3-software-2 1302/udp # CI3-Software-2\nsftsrv 1303/tcp # sftsrv\nsftsrv 1303/udp # sftsrv\nboomerang 1304/tcp # Boomerang\nboomerang 1304/udp # Boomerang\npe-mike 1305/tcp # pe-mike\npe-mike 1305/udp # pe-mike\nre-conn-proto 1306/tcp # RE-Conn-Proto\nre-conn-proto 1306/udp # RE-Conn-Proto\npacmand 1307/tcp # Pacmand\npacmand 1307/udp # Pacmand\nodsi 1308/tcp # Optical Domain Service Interconnect (ODSI)\nodsi 1308/udp # Optical Domain Service Interconnect (ODSI)\njtag-server 1309/tcp # JTAG server\njtag-server 1309/udp # JTAG server\nhusky 1310/tcp # Husky\nhusky 1310/udp # Husky\nrxmon 1311/tcp # RxMon\nrxmon 1311/udp # RxMon\nsti-envision 1312/tcp # STI Envision\nsti-envision 1312/udp # STI Envision\nbmc_patroldb 1313/udp # BMC_PATROLDB\npdps 1314/tcp # Photoscript Distributed Printing System\npdps 1314/udp # Photoscript Distributed Printing System\nels 1315/tcp # E.L.S., Event Listener Service\nels 1315/udp # E.L.S., Event Listener Service\nexbit-escp 1316/tcp # Exbit-ESCP\nexbit-escp 1316/udp # Exbit-ESCP\nvrts-ipcserver 1317/tcp # vrts-ipcserver\nvrts-ipcserver 1317/udp # vrts-ipcserver\nkrb5gatekeeper 1318/tcp # krb5gatekeeper\nkrb5gatekeeper 1318/udp # krb5gatekeeper\namx-icsp 1319/tcp # AMX-ICSP\namx-icsp 1319/udp # AMX-ICSP\namx-axbnet 1320/tcp # AMX-AXBNET\namx-axbnet 1320/udp # AMX-AXBNET\nnovation 1322/tcp # Novation\nnovation 1322/udp # Novation\nbrcd 1323/tcp # brcd\nbrcd 1323/udp # brcd\ndelta-mcp 1324/tcp # delta-mcp\ndelta-mcp 1324/udp # delta-mcp\ndx-instrument 1325/tcp # DX-Instrument\ndx-instrument 1325/udp # DX-Instrument\nwimsic 1326/tcp # WIMSIC\nwimsic 1326/udp # WIMSIC\nultrex 1327/tcp # Ultrex\nultrex 1327/udp # Ultrex\newall 1328/tcp # EWALL\newall 1328/udp # EWALL\nnetdb-export 1329/tcp # netdb-export\nnetdb-export 1329/udp # netdb-export\nstreetperfect 1330/tcp # StreetPerfect\nstreetperfect 1330/udp # StreetPerfect\nintersan 1331/tcp # intersan\nintersan 1331/udp # intersan\npcia-rxp-b 1332/tcp # PCIA RXP-B\npcia-rxp-b 1332/udp # PCIA RXP-B\npasswrd-policy 1333/tcp # Password Policy\npasswrd-policy 1333/udp # Password Policy\nwritesrv 1334/tcp # writesrv\nwritesrv 1334/udp # writesrv\ndigital-notary 1335/tcp # Digital Notary Protocol\ndigital-notary 1335/udp # Digital Notary Protocol\nischat 1336/tcp # Instant Service Chat\nischat 1336/udp # Instant Service Chat\nmenandmice-dns 1337/tcp # menandmice DNS\nmenandmice-dns 1337/udp # menandmice DNS\nwmc-log-svc 1338/tcp # WMC-log-svr\nwmc-log-svc 1338/udp # WMC-log-svr\nkjtsiteserver 1339/tcp # kjtsiteserver\nkjtsiteserver 1339/udp ", 4096) = 4096 703120 17:32:32.585985 <... read resumed> "land Valley Exploration Ltd. Lic. Man.\nmvx-lm 1510/udp # Midland Valley Exploration Ltd. Lic. Man.\n3l-l1 1511/tcp # 3l-l1\n3l-l1 1511/udp # 3l-l1\nfujitsu-dtc 1513/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtc 1513/udp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc\nfujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc\nifor-protocol 1515/tcp # ifor-protocol\nifor-protocol 1515/udp # ifor-protocol\nvpad 1516/tcp # Virtual Places Audio data\nvpad 1516/udp # Virtual Places Audio data\nvpac 1517/tcp # Virtual Places Audio control\nvpac 1517/udp # Virtual Places Audio control\nvpvd 1518/tcp # Virtual Places Video data\nvpvd 1518/udp # Virtual Places Video data\nvpvc 1519/tcp # Virtual Places Video control\nvpvc 1519/udp # Virtual Places Video control\natm-zip-office 1520/tcp # atm zip office\natm-zip-office 1520/udp # atm zip office\nncube-lm 1521/tcp # nCube License Manager\nncube-lm 1521/udp # nCube License Manager\nricardo-lm 1522/tcp # Ricardo North America License Manager\nricardo-lm 1522/udp # Ricardo North America License Manager\ncichild-lm 1523/tcp # cichild\ncichild-lm 1523/udp # cichild\npdap-np 1526/tcp # Prospero Data Access Prot non-priv\npdap-np 1526/udp # Prospero Data Access Prot non-priv\ntlisrv 1527/tcp # oracle\ntlisrv 1527/udp # oracle\ncoauthor 1529/udp # oracle\nrap-service 1530/tcp # rap-service\nrap-service 1530/udp # rap-service\nrap-listen 1531/tcp # rap-listen\nrap-listen 1531/udp # rap-listen\nmiroconnect 1532/tcp # miroconnect\nmiroconnect 1532/udp # miroconnect\nvirtual-places 1533/tcp # Virtual Places Software\nvirtual-places 1533/udp # Virtual Places Software\nmicromuse-lm 1534/tcp # micromuse-lm\nmicromuse-lm 1534/udp # micromuse-lm\nampr-info 1535/tcp # ampr-info\nampr-info 1535/udp # ampr-info\nampr-inter 1536/tcp # ampr-inter\nampr-inter 1536/udp # ampr-inter\nsdsc-lm 1537/tcp # isi-lm\nsdsc-lm 1537/udp # isi-lm\n3ds-lm 1538/tcp # 3ds-lm\n3ds-lm 1538/udp # 3ds-lm\nintellistor-lm 1539/tcp # Intellistor License Manager\nintellistor-lm 1539/udp # Intellistor License Manager\nrds 1540/tcp # rds\nrds 1540/udp # rds\nrds2 1541/tcp # rds2\nrds2 1541/udp # rds2\ngridgen-elmd 1542/tcp # gridgen-elmd\ngridgen-elmd 1542/udp # gridgen-elmd\nsimba-cs 1543/tcp # simba-cs\nsimba-cs 1543/udp # simba-cs\naspeclmd 1544/tcp # aspeclmd\naspeclmd 1544/udp # aspeclmd\nvistium-share 1545/tcp # vistium-share\nvistium-share 1545/udp # vistium-share\nabbaccuray 1546/tcp # abbaccuray\nabbaccuray 1546/udp # abbaccuray\nlaplink 1547/tcp # laplink\nlaplink 1547/udp # laplink\naxon-lm 1548/tcp # Axon License Manager\naxon-lm 1548/udp # Axon License Manager\nshivahose 1549", 4096) = 4096 703120 17:32:32.586136 <... read resumed> "/tcp # Shiva Hose\nshivasound 1549/udp # Shiva Sound\n3m-image-lm 1550/tcp # Image Storage license manager 3M Company\n3m-image-lm 1550/udp # Image Storage license manager 3M Company\nhecmtl-db 1551/tcp # HECMTL-DB\nhecmtl-db 1551/udp # HECMTL-DB\npciarray 1552/tcp # pciarray\npciarray 1552/udp # pciarray\nsna-cs 1553/tcp # sna-cs\nsna-cs 1553/udp # sna-cs\ncaci-lm 1554/tcp # CACI Products Company License Manager\ncaci-lm 1554/udp # CACI Products Company License Manager\nlivelan 1555/tcp # livelan\nlivelan 1555/udp # livelan\nveritas_pbx 1556/tcp # VERITAS Private Branch Exchange\nveritas_pbx 1556/udp # VERITAS Private Branch Exchange\narbortext-lm 1557/tcp # ArborText License Manager\narbortext-lm 1557/udp # ArborText License Manager\nxingmpeg 1558/tcp # xingmpeg\nxingmpeg 1558/udp # xingmpeg\nweb2host 1559/tcp # web2host\nweb2host 1559/udp # web2host\nasci-val 1560/tcp # ASCI-RemoteSHADOW\nasci-val 1560/udp # ASCI-RemoteSHADOW\nfacilityview 1561/tcp # facilityview\nfacilityview 1561/udp # facilityview\npconnectmgr 1562/tcp # pconnectmgr\npconnectmgr 1562/udp # pconnectmgr\ncadabra-lm 1563/tcp # Cadabra License Manager\ncadabra-lm 1563/udp # Cadabra License Manager\npay-per-view 1564/tcp # Pay-Per-View\npay-per-view 1564/udp # Pay-Per-View\nwinddlb 1565/tcp # WinDD\nwinddlb 1565/udp # WinDD\ncorelvideo 1566/tcp # CORELVIDEO\ncorelvideo 1566/udp # CORELVIDEO\njlicelmd 1567/tcp # jlicelmd\njlicelmd 1567/udp # jlicelmd\ntsspmap 1568/tcp # tsspmap\ntsspmap 1568/udp # tsspmap\nets 1569/tcp # ets\nets 1569/udp # ets\norbixd 1570/tcp # orbixd\norbixd 1570/udp # orbixd\nrdb-dbs-disp 1571/tcp # Oracle Remote Data Base\nrdb-dbs-disp 1571/udp # Oracle Remote Data Base\nchip-lm 1572/tcp # Chipcom License Manager\nchip-lm 1572/udp # Chipcom License Manager\nitscomm-ns 1573/tcp # itscomm-ns\nitscomm-ns 1573/udp # itscomm-ns\nmvel-lm 1574/tcp # mvel-lm\nmvel-lm 1574/udp # mvel-lm\noraclenames 1575/tcp # oraclenames\noraclenames 1575/udp # oraclenames\nmoldflow-lm 1576/tcp # Moldflow License Manager\nmoldflow-lm 1576/udp # Moldflow License Manager\nhypercube-lm 1577/tcp # hypercube-lm\nhypercube-lm 1577/udp # hypercube-lm\njacobus-lm 1578/tcp # Jacobus License Manager\njacobus-lm 1578/udp # Jacobus License Manager\nioc-sea-lm 1579/tcp # ioc-sea-lm\nioc-sea-lm 1579/udp # ioc-sea-lm\ntn-tl-r1 1580/tcp # tn-tl-r1\ntn-tl-r2 1580/udp # tn-tl-r2\nmil-2045-47001 1581/tcp # MIL-2045-47001\nmil-2045-47001 1581/udp # MIL-2045-47001\nmsims 1582/tcp # MSIMS\nmsims 1582/udp # MSIMS\nsimbaexpress 1583/tcp # simbaexpress\nsimbaexpress 1583/udp # simbaexpress\ntn-tl-fd2 1584/tcp # tn-tl-fd2\ntn-tl-fd2 1584/udp # tn-tl-fd2\nintv 1585/tcp ", 4096) = 4096 703120 17:32:32.588646 <... read resumed> "k 2124/tcp # ELATELINK\nelatelink 2124/udp # ELATELINK\nlockstep 2125/tcp # LOCKSTEP\nlockstep 2125/udp # LOCKSTEP\npktcable-cops 2126/tcp # PktCable-COPS\npktcable-cops 2126/udp # PktCable-COPS\nindex-pc-wb 2127/tcp # INDEX-PC-WB\nindex-pc-wb 2127/udp # INDEX-PC-WB\nnet-steward 2128/tcp # Net Steward Control\nnet-steward 2128/udp # Net Steward Control\ncs-live 2129/tcp # cs-live.com\ncs-live 2129/udp # cs-live.com\nxds 2130/tcp # XDS\nxds 2130/udp # XDS\navantageb2b 2131/tcp # Avantageb2b\navantageb2b 2131/udp # Avantageb2b\nsolera-epmap 2132/tcp # SoleraTec End Point Map\nsolera-epmap 2132/udp # SoleraTec End Point Map\nzymed-zpp 2133/tcp # ZYMED-ZPP\nzymed-zpp 2133/udp # ZYMED-ZPP\navenue 2134/tcp # AVENUE\navenue 2134/udp # AVENUE\ngris 2135/tcp # Grid Resource Information Server\ngris 2135/udp # Grid Resource Information Server\nappworxsrv 2136/tcp # APPWORXSRV\nappworxsrv 2136/udp # APPWORXSRV\nconnect 2137/tcp # CONNECT\nconnect 2137/udp # CONNECT\nunbind-cluster 2138/tcp # UNBIND-CLUSTER\nunbind-cluster 2138/udp # UNBIND-CLUSTER\nias-auth 2139/tcp # IAS-AUTH\nias-auth 2139/udp # IAS-AUTH\nias-reg 2140/tcp # IAS-REG\nias-reg 2140/udp # IAS-REG\nias-admind 2141/tcp # IAS-ADMIND\nias-admind 2141/udp # IAS-ADMIND\ntdmoip 2142/tcp # TDM OVER IP\ntdmoip 2142/udp # TDM OVER IP\nlv-jc 2143/tcp # Live Vault Job Control\nlv-jc 2143/udp # Live Vault Job Control\nlv-ffx 2144/tcp # Live Vault Fast Object Transfer\nlv-ffx 2144/udp # Live Vault Fast Object Transfer\nlv-pici 2145/tcp # Live Vault Remote Diagnostic Console Support\nlv-pici 2145/udp # Live Vault Remote Diagnostic Console Support\nlv-not 2146/tcp # Live Vault Admin Event Notification\nlv-not 2146/udp # Live Vault Admin Event Notification\nlv-auth 2147/tcp # Live Vault Authentication\nlv-auth 2147/udp # Live Vault Authentication\nveritas-ucl 2148/tcp # VERITAS UNIVERSAL COMMUNICATION LAYER\nveritas-ucl 2148/udp # VERITAS UNIVERSAL COMMUNICATION LAYER\nacptsys 2149/tcp # ACPTSYS\nacptsys 2149/udp # ACPTSYS\ndocent 2151/tcp # DOCENT\ndocent 2151/udp # DOCENT\ngtp-user 2152/tcp # GTP-User Plane (3GPP)\ngtp-user 2152/udp # GTP-User Plane (3GPP)\nctlptc 2153/tcp # Control Protocol\nctlptc 2153/udp # Control Protocol\nstdptc 2154/tcp # Standard Protocol\nstdptc 2154/udp # Standard Protocol\nbrdptc 2155/tcp # Bridge Protocol\nbrdptc 2155/udp # Bridge Protocol\ntrp 2156/tcp # Talari Reliable Protocol\ntrp 2156/udp # Talari Reliable Protocol\nxnds 2157/tcp # Xerox Network Document Scan Protocol\nxnds 2157/udp # Xerox Network Document Scan Protocol\ntouchnetplus 2158/tcp # TouchNetPlus Service\ntouchnetplus 2158/udp # TouchNetPlus Service\ngdbremote 2159/tcp", 4096) = 4096 703120 17:32:32.588806 <... read resumed> " # GDB Remote Debug Port\ngdbremote 2159/udp # GDB Remote Debug Port\napc-2160 2160/tcp # APC 2160\napc-2160 2160/udp # APC 2160\napc-2161 2161/tcp # APC 2161\napc-2161 2161/udp # APC 2161\nnavisphere 2162/tcp # Navisphere\nnavisphere 2162/udp # Navisphere\nnavisphere-sec 2163/tcp # Navisphere Secure\nnavisphere-sec 2163/udp # Navisphere Secure\nddns-v3 2164/tcp # Dynamic DNS Version 3\nddns-v3 2164/udp # Dynamic DNS Version 3\nx-bone-api 2165/tcp # X-Bone API\nx-bone-api 2165/udp # X-Bone API\niwserver 2166/tcp # iwserver\niwserver 2166/udp # iwserver\nraw-serial 2167/tcp # Raw Async Serial Link\nraw-serial 2167/udp # Raw Async Serial Link\neasy-soft-mux 2168/tcp # easy-soft Multiplexer\neasy-soft-mux 2168/udp # easy-soft Multiplexer\nbrain 2169/tcp # Backbone for Academic Information Notification (BRAIN)\nbrain 2169/udp # Backbone for Academic Information Notification (BRAIN)\neyetv 2170/tcp # EyeTV Server Port\neyetv 2170/udp # EyeTV Server Port\nmsfw-storage 2171/tcp # MS Firewall Storage\nmsfw-storage 2171/udp # MS Firewall Storage\nmsfw-s-storage 2172/tcp # MS Firewall SecureStorage\nmsfw-s-storage 2172/udp # MS Firewall SecureStorage\nmsfw-replica 2173/tcp # MS Firewall Replication\nmsfw-replica 2173/udp # MS Firewall Replication\nmsfw-array 2174/tcp # MS Firewall Intra Array\nmsfw-array 2174/udp # MS Firewall Intra Array\nairsync 2175/tcp # Microsoft Desktop AirSync Protocol\nairsync 2175/udp # Microsoft Desktop AirSync Protocol\nrapi 2176/tcp # Microsoft ActiveSync Remote API\nrapi 2176/udp # Microsoft ActiveSync Remote API\nqwave 2177/tcp # qWAVE Bandwidth Estimate\nqwave 2177/udp # qWAVE Bandwidth Estimate\nbitspeer 2178/tcp # Peer Services for BITS\nbitspeer 2178/udp # Peer Services for BITS\nvmrdp 2179/tcp # Microsoft RDP for virtual machines\nvmrdp 2179/udp # Microsoft RDP for virtual machines\nmc-gt-srv 2180/tcp # Millicent Vendor Gateway Server\nmc-gt-srv 2180/udp # Millicent Vendor Gateway Server\neforward 2181/tcp # eforward\neforward 2181/udp # eforward\ncgn-stat 2182/tcp # CGN status\ncgn-stat 2182/udp # CGN status\ncgn-config 2183/tcp # Code Green configuration\ncgn-config 2183/udp # Code Green configuration\nnvd 2184/tcp # NVD User\nnvd 2184/udp # NVD User\nonbase-dds 2185/tcp # OnBase Distributed Disk Services\nonbase-dds 2185/udp # OnBase Distributed Disk Services\ngtaua 2186/tcp # Guy-Tek Automated Update Applications\ngtaua 2186/udp # Guy-Tek Automated Update Applications\nssmc 2187/tcp # Sepehr System Management Control\nssmd 2187/udp # Sepehr System Management Data\ntivoconnect 2190/tcp # TiVoConnect Beacon\ntivoconnect 2190/udp # TiVoConnect Beacon\ntvbus 2191/tcp # TvBus Messaging\ntvbus 2191/udp # TvBus Messaging\nasdis 2192/tcp # ASDIS software management\nasdis 2192/udp # ASDIS software ", 4096) = 4096 703120 17:32:32.589423 <... read resumed> "# Konshus License Manager (FLEX)\nadvant-lm 2295/tcp # Advant License Manager\nadvant-lm 2295/udp # Advant License Manager\ntheta-lm 2296/tcp # Theta License Manager (Rainbow)\ntheta-lm 2296/udp # Theta License Manager (Rainbow)\nd2k-datamover1 2297/tcp # D2K DataMover 1\nd2k-datamover1 2297/udp # D2K DataMover 1\nd2k-datamover2 2298/tcp # D2K DataMover 2\nd2k-datamover2 2298/udp # D2K DataMover 2\npc-telecommute 2299/tcp # PC Telecommute\npc-telecommute 2299/udp # PC Telecommute\ncvmmon 2300/tcp # CVMMON\ncvmmon 2300/udp # CVMMON\ncpq-wbem 2301/tcp # Compaq HTTP\ncpq-wbem 2301/udp # Compaq HTTP\nbinderysupport 2302/tcp # Bindery Support\nbinderysupport 2302/udp # Bindery Support\nproxy-gateway 2303/tcp # Proxy Gateway\nproxy-gateway 2303/udp # Proxy Gateway\nattachmate-uts 2304/tcp # Attachmate UTS\nattachmate-uts 2304/udp # Attachmate UTS\nmt-scaleserver 2305/tcp # MT ScaleServer\nmt-scaleserver 2305/udp # MT ScaleServer\ntappi-boxnet 2306/tcp # TAPPI BoxNet\ntappi-boxnet 2306/udp # TAPPI BoxNet\npehelp 2307/tcp # pehelp\npehelp 2307/udp # pehelp\nsdhelp 2308/tcp # sdhelp\nsdhelp 2308/udp # sdhelp\nsdserver 2309/tcp # SD Server\nsdserver 2309/udp # SD Server\nsdclient 2310/tcp # SD Client\nsdclient 2310/udp # SD Client\nmessageservice 2311/tcp # Message Service\nmessageservice 2311/udp # Message Service\nwanscaler 2312/tcp # WANScaler Communication Service\nwanscaler 2312/udp # WANScaler Communication Service\niapp 2313/tcp # IAPP (Inter Access Point Protocol)\niapp 2313/udp # IAPP (Inter Access Point Protocol)\ncr-websystems 2314/tcp # CR WebSystems\ncr-websystems 2314/udp # CR WebSystems\nprecise-sft 2315/tcp # Precise Sft.\nprecise-sft 2315/udp # Precise Sft.\nsent-lm 2316/tcp # SENT License Manager\nsent-lm 2316/udp # SENT License Manager\nattachmate-g32 2317/tcp # Attachmate G32\nattachmate-g32 2317/udp # Attachmate G32\ncadencecontrol 2318/tcp # Cadence Control\ncadencecontrol 2318/udp # Cadence Control\ninfolibria 2319/tcp # InfoLibria\ninfolibria 2319/udp # InfoLibria\nsiebel-ns 2320/tcp # Siebel NS\nsiebel-ns 2320/udp # Siebel NS\nrdlap 2321/tcp # RDLAP\nrdlap 2321/udp # RDLAP\nofsd 2322/tcp # ofsd\nofsd 2322/udp # ofsd\n3d-nfsd 2323/tcp # 3d-nfsd\n3d-nfsd 2323/udp # 3d-nfsd\ncosmocall 2324/tcp # Cosmocall\ncosmocall 2324/udp # Cosmocall\nansysli 2325/tcp # ANSYS Licensing Interconnect\nansysli 2325/udp # ANSYS Licensing Interconnect\nidcp 2326/tcp # IDCP\nidcp 2326/udp # IDCP\nxingcsm 2327/tcp # xingcsm\nxingcsm 2327/udp # xingcsm\nnetrix-sftm 2328/tcp # Netrix SFTM\nnetrix-sftm 2328/udp # Netrix SFTM\ntscchat 2330/tcp # TSCCHAT\ntscchat 2330/udp # TSCCHAT\nagentview 2331/tcp # AGENTVIEW\nagentview 2331/udp # AGENTVIEW\nrcc-host ", 4096) = 4096 703120 17:32:32.590592 <... read resumed> "RAP\nspamtrap 2568/udp # SPAM TRAP\nsonuscallsig 2569/tcp # Sonus Call Signal\nsonuscallsig 2569/udp # Sonus Call Signal\nhs-port 2570/tcp # HS Port\nhs-port 2570/udp # HS Port\ncecsvc 2571/tcp # CECSVC\ncecsvc 2571/udp # CECSVC\nibp 2572/tcp # IBP\nibp 2572/udp # IBP\ntrustestablish 2573/tcp # Trust Establish\ntrustestablish 2573/udp # Trust Establish\nblockade-bpsp 2574/tcp # Blockade BPSP\nblockade-bpsp 2574/udp # Blockade BPSP\nhl7 2575/tcp # HL7\nhl7 2575/udp # HL7\ntclprodebugger 2576/tcp # TCL Pro Debugger\ntclprodebugger 2576/udp # TCL Pro Debugger\nscipticslsrvr 2577/tcp # Scriptics Lsrvr\nscipticslsrvr 2577/udp # Scriptics Lsrvr\nrvs-isdn-dcp 2578/tcp # RVS ISDN DCP\nrvs-isdn-dcp 2578/udp # RVS ISDN DCP\nmpfoncl 2579/tcp # mpfoncl\nmpfoncl 2579/udp # mpfoncl\ntributary 2580/tcp # Tributary\ntributary 2580/udp # Tributary\nargis-te 2581/tcp # ARGIS TE\nargis-te 2581/udp # ARGIS TE\nargis-ds 2582/tcp # ARGIS DS\nargis-ds 2582/udp # ARGIS DS\nmon 2583/tcp # MON\nmon 2583/udp # MON\ncyaserv 2584/tcp # cyaserv\ncyaserv 2584/udp # cyaserv\nnetx-server 2585/tcp # NETX Server\nnetx-server 2585/udp # NETX Server\nnetx-agent 2586/tcp # NETX Agent\nnetx-agent 2586/udp # NETX Agent\nmasc 2587/tcp # MASC\nmasc 2587/udp # MASC\nprivilege 2588/tcp # Privilege\nprivilege 2588/udp # Privilege\nquartus-tcl 2589/tcp # quartus tcl\nquartus-tcl 2589/udp # quartus tcl\nidotdist 2590/tcp # idotdist\nidotdist 2590/udp # idotdist\nmaytagshuffle 2591/tcp # Maytag Shuffle\nmaytagshuffle 2591/udp # Maytag Shuffle\nnetrek 2592/tcp # netrek\nnetrek 2592/udp # netrek\nmns-mail 2593/tcp # MNS Mail Notice Service\nmns-mail 2593/udp # MNS Mail Notice Service\ndts 2594/tcp # Data Base Server\ndts 2594/udp # Data Base Server\nworldfusion1 2595/tcp # World Fusion 1\nworldfusion1 2595/udp # World Fusion 1\nworldfusion2 2596/tcp # World Fusion 2\nworldfusion2 2596/udp # World Fusion 2\nhomesteadglory 2597/tcp # Homestead Glory\nhomesteadglory 2597/udp # Homestead Glory\ncitriximaclient 2598/tcp # Citrix MA Client\ncitriximaclient 2598/udp # Citrix MA Client\nsnapd 2599/tcp # Snap Discovery\nsnapd 2599/udp # Snap Discovery\nconnection 2607/tcp # Dell Connection\nconnection 2607/udp # Dell Connection\nwag-service 2608/tcp # Wag Service\nwag-service 2608/udp # Wag Service\nsystem-monitor 2609/tcp # System Monitor\nsystem-monitor 2609/udp # System Monitor\nversa-tek 2610/tcp # VersaTek\nversa-tek 2610/udp # VersaTek\nlionhead 2611/tcp # LIONHEAD\nlionhead 2611/udp # LIONHEAD\nqpasa-agent 2612/tcp # Qpasa Agent\nqpasa-agent 2612/udp # Qpasa Agent\nsmntubootstrap 2613/tcp # SMNTUBootstrap", 4096) = 4096 703120 17:32:32.591937 <... read resumed> "\ntopflow 2885/tcp # TopFlow\ntopflow 2885/udp # TopFlow\nresponselogic 2886/tcp # RESPONSELOGIC\nresponselogic 2886/udp # RESPONSELOGIC\naironetddp 2887/tcp # aironet\naironetddp 2887/udp # aironet\nspcsdlobby 2888/tcp # SPCSDLOBBY\nspcsdlobby 2888/udp # SPCSDLOBBY\nrsom 2889/tcp # RSOM\nrsom 2889/udp # RSOM\ncspclmulti 2890/tcp # CSPCLMULTI\ncspclmulti 2890/udp # CSPCLMULTI\ncinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager\ncinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager\nsnifferdata 2892/tcp # SNIFFERDATA\nsnifferdata 2892/udp # SNIFFERDATA\nvseconnector 2893/tcp # VSECONNECTOR\nvseconnector 2893/udp # VSECONNECTOR\nabacus-remote 2894/tcp # ABACUS-REMOTE\nabacus-remote 2894/udp # ABACUS-REMOTE\nnatuslink 2895/tcp # NATUS LINK\nnatuslink 2895/udp # NATUS LINK\necovisiong6-1 2896/tcp # ECOVISIONG6-1\necovisiong6-1 2896/udp # ECOVISIONG6-1\ncitrix-rtmp 2897/tcp # Citrix RTMP\ncitrix-rtmp 2897/udp # Citrix RTMP\nappliance-cfg 2898/tcp # APPLIANCE-CFG\nappliance-cfg 2898/udp # APPLIANCE-CFG\npowergemplus 2899/tcp # POWERGEMPLUS\npowergemplus 2899/udp # POWERGEMPLUS\nquicksuite 2900/tcp # QUICKSUITE\nquicksuite 2900/udp # QUICKSUITE\nallstorcns 2901/tcp # ALLSTORCNS\nallstorcns 2901/udp # ALLSTORCNS\nnetaspi 2902/tcp # NET ASPI\nnetaspi 2902/udp # NET ASPI\nsuitcase 2903/tcp # SUITCASE\nsuitcase 2903/udp # SUITCASE\nm2ua 2904/tcp # M2UA\nm2ua 2904/udp # M2UA\nm2ua 2904/sctp # M2UA\nm3ua 2905/tcp # M3UA\nm3ua 2905/sctp # M3UA\ncaller9 2906/tcp # CALLER9\ncaller9 2906/udp # CALLER9\nwebmethods-b2b 2907/tcp # WEBMETHODS B2B\nwebmethods-b2b 2907/udp # WEBMETHODS B2B\nmao 2908/tcp # mao\nmao 2908/udp # mao\nfunk-dialout 2909/tcp # Funk Dialout\nfunk-dialout 2909/udp # Funk Dialout\ntdaccess 2910/tcp # TDAccess\ntdaccess 2910/udp # TDAccess\nblockade 2911/tcp # Blockade\nblockade 2911/udp # Blockade\nepicon 2912/tcp # Epicon\nepicon 2912/udp # Epicon\nboosterware 2913/tcp # Booster Ware\nboosterware 2913/udp # Booster Ware\ngamelobby 2914/tcp # Game Lobby\ngamelobby 2914/udp # Game Lobby\ntksocket 2915/tcp # TK Socket\ntksocket 2915/udp # TK Socket\nelvin_server 2916/tcp # Elvin Server\nelvin_server 2916/udp # Elvin Server\nelvin_client 2917/tcp # Elvin Client\nelvin_client 2917/udp # Elvin Client\nkastenchasepad 2918/tcp # Kasten Chase Pad\nkastenchasepad 2918/udp # Kasten Chase Pad\nroboer 2919/tcp # roboER\nroboer 2919/udp # roboER\nroboeda 2920/tcp # roboEDA\nroboeda 2920/udp # roboEDA\ncesdcdman 2921/tcp # CESD Contents Delivery Management\ncesdcdman 2921/udp # CESD Contents Delivery Management\ncesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer", 4096) = 4096 703120 17:32:32.594417 <... read resumed> " # Spiralcraft Admin\nhri-port 3439/tcp # HRI Interface Port\nhri-port 3439/udp # HRI Interface Port\nans-console 3440/tcp # Net Steward Mgmt Console\nans-console 3440/udp # Net Steward Mgmt Console\nconnect-client 3441/tcp # OC Connect Client\nconnect-client 3441/udp # OC Connect Client\nconnect-server 3442/tcp # OC Connect Server\nconnect-server 3442/udp # OC Connect Server\nov-nnm-websrv 3443/tcp # OpenView Network Node Manager WEB Server\nov-nnm-websrv 3443/udp # OpenView Network Node Manager WEB Server\ndenali-server 3444/tcp # Denali Server\ndenali-server 3444/udp # Denali Server\nmonp 3445/tcp # Media Object Network\nmonp 3445/udp # Media Object Network\n3comfaxrpc 3446/tcp # 3Com FAX RPC port\n3comfaxrpc 3446/udp # 3Com FAX RPC port\ndirectnet 3447/tcp # DirectNet IM System\ndirectnet 3447/udp # DirectNet IM System\ndnc-port 3448/tcp # Discovery and Net Config\ndnc-port 3448/udp # Discovery and Net Config\nhotu-chat 3449/tcp # HotU Chat\nhotu-chat 3449/udp # HotU Chat\ncastorproxy 3450/tcp # CAStorProxy\ncastorproxy 3450/udp # CAStorProxy\nasam 3451/tcp # ASAM Services\nasam 3451/udp # ASAM Services\nsabp-signal 3452/tcp # SABP-Signalling Protocol\nsabp-signal 3452/udp # SABP-Signalling Protocol\npscupd 3453/tcp # PSC Update Port\npscupd 3453/udp # PSC Update Port\nmira 3454/tcp # Apple Remote Access Protocol\nvat 3456/tcp # VAT default data\nvat 3456/udp # VAT default data\nvat-control 3457/tcp # VAT default control\nvat-control 3457/udp # VAT default control\nd3winosfi 3458/tcp # D3WinOSFI\nd3winosfi 3458/udp # D3WinOSFI\nintegral 3459/tcp # TIP Integral\nintegral 3459/udp # TIP Integral\nedm-manager 3460/tcp # EDM Manger\nedm-manager 3460/udp # EDM Manger\nedm-stager 3461/tcp # EDM Stager\nedm-stager 3461/udp # EDM Stager\nedm-std-notify 3462/tcp # EDM STD Notify\nedm-std-notify 3462/udp # EDM STD Notify\nedm-adm-notify 3463/tcp # EDM ADM Notify\nedm-adm-notify 3463/udp # EDM ADM Notify\nedm-mgr-sync 3464/tcp # EDM MGR Sync\nedm-mgr-sync 3464/udp # EDM MGR Sync\nedm-mgr-cntrl 3465/tcp # EDM MGR Cntrl\nedm-mgr-cntrl 3465/udp # EDM MGR Cntrl\nworkflow 3466/tcp # WORKFLOW\nworkflow 3466/udp # WORKFLOW\nrcst 3467/tcp # RCST\nrcst 3467/udp # RCST\nttcmremotectrl 3468/tcp # TTCM Remote Controll\nttcmremotectrl 3468/udp # TTCM Remote Controll\npluribus 3469/tcp # Pluribus\npluribus 3469/udp # Pluribus\njt400 3470/tcp # jt400\njt400 3470/udp # jt400\njt400-ssl 3471/tcp # jt400-ssl\njt400-ssl 3471/udp # jt400-ssl\njaugsremotec-1 3472/tcp # JAUGS N-G Remotec 1\njaugsremotec-1 3472/udp # JAUGS N-G Remotec 1\njaugsremotec-2 3473/tcp # JAUGS N-G Remotec 2\njaugsremotec-2 3473/udp # JAUGS N-G Remotec 2\nttntspauto 3474/tcp # TSP Automation\nttntspauto 3474/udp # TSP Automation\ngenisar-port 3475/tcp # ", 4096) = 4096 703120 17:32:32.596471 <... read resumed> "2/tcp # DTS Service Port\nmsdts1 3882/udp # DTS Service Port\nvrpn 3883/tcp # VR Peripheral Network\nvrpn 3883/udp # VR Peripheral Network\nsoftrack-meter 3884/tcp # SofTrack Metering\nsoftrack-meter 3884/udp # SofTrack Metering\ntopflow-ssl 3885/tcp # TopFlow SSL\ntopflow-ssl 3885/udp # TopFlow SSL\nnei-management 3886/tcp # NEI management port\nnei-management 3886/udp # NEI management port\nciphire-data 3887/tcp # Ciphire Data Transport\nciphire-data 3887/udp # Ciphire Data Transport\nciphire-serv 3888/tcp # Ciphire Services\nciphire-serv 3888/udp # Ciphire Services\ndandv-tester 3889/tcp # D and V Tester Control Port\ndandv-tester 3889/udp # D and V Tester Control Port\nndsconnect 3890/tcp # Niche Data Server Connect\nndsconnect 3890/udp # Niche Data Server Connect\nrtc-pm-port 3891/tcp # Oracle RTC-PM port\nrtc-pm-port 3891/udp # Oracle RTC-PM port\npcc-image-port 3892/tcp # PCC-image-port\npcc-image-port 3892/udp # PCC-image-port\ncgi-starapi 3893/tcp # CGI StarAPI Server\ncgi-starapi 3893/udp # CGI StarAPI Server\nsyam-agent 3894/tcp # SyAM Agent Port\nsyam-agent 3894/udp # SyAM Agent Port\nsyam-smc 3895/tcp # SyAm SMC Service Port\nsyam-smc 3895/udp # SyAm SMC Service Port\nsdo-tls 3896/tcp # Simple Distributed Objects over TLS\nsdo-tls 3896/udp # Simple Distributed Objects over TLS\nsdo-ssh 3897/tcp # Simple Distributed Objects over SSH\nsdo-ssh 3897/udp # Simple Distributed Objects over SSH\nsenip 3898/tcp # IAS, Inc. SmartEye NET Internet Protocol\nsenip 3898/udp # IAS, Inc. SmartEye NET Internet Protocol\nitv-control 3899/tcp # ITV Port\nitv-control 3899/udp # ITV Port\nnimsh 3901/tcp # NIM Service Handler\nnimsh 3901/udp # NIM Service Handler\nnimaux 3902/tcp # NIMsh Auxiliary Port\nnimaux 3902/udp # NIMsh Auxiliary Port\ncharsetmgr 3903/tcp # CharsetMGR\ncharsetmgr 3903/udp # CharsetMGR\nomnilink-port 3904/tcp # Arnet Omnilink Port\nomnilink-port 3904/udp # Arnet Omnilink Port\nmupdate 3905/tcp # Mailbox Update (MUPDATE) protocol\nmupdate 3905/udp # Mailbox Update (MUPDATE) protocol\ntopovista-data 3906/tcp # TopoVista elevation data\ntopovista-data 3906/udp # TopoVista elevation data\nimoguia-port 3907/tcp # Imoguia Port\nimoguia-port 3907/udp # Imoguia Port\nhppronetman 3908/tcp # HP Procurve NetManagement\nhppronetman 3908/udp # HP Procurve NetManagement\nsurfcontrolcpa 3909/tcp # SurfControl CPA\nsurfcontrolcpa 3909/udp # SurfControl CPA\nprnrequest 3910/tcp # Printer Request Port\nprnrequest 3910/udp # Printer Request Port\nprnstatus 3911/tcp # Printer Status Port\nprnstatus 3911/udp # Printer Status Port\ngbmt-stars 3912/tcp # Global Maintech Stars\ngbmt-stars 3912/udp # Global Maintech Stars\nlistcrt-port 3913/tcp # ListCREATOR Port\nlistcrt-port 3913/udp # ListCREATOR Port\nlistcrt-port-2 3914/tcp # ListCREATOR Port 2\nlistcrt-port-2 3914/udp # ListCREATOR Port 2\nagcat 3915/tcp # Auto-Graphics Catalogin", 4096) = 4096 703120 17:32:32.596815 <... read resumed> "evices\napdap 3948/tcp # Anton Paar Device Administration Protocol\napdap 3948/udp # Anton Paar Device Administration Protocol\ndrip 3949/tcp # Dynamic Routing Information Protocol\ndrip 3949/udp # Dynamic Routing Information Protocol\nnamemunge 3950/tcp # Name Munging\nnamemunge 3950/udp # Name Munging\npwgippfax 3951/tcp # PWG IPP Facsimile\npwgippfax 3951/udp # PWG IPP Facsimile\ni3-sessionmgr 3952/tcp # I3 Session Manager\ni3-sessionmgr 3952/udp # I3 Session Manager\nxmlink-connect 3953/tcp # Eydeas XMLink Connect\nxmlink-connect 3953/udp # Eydeas XMLink Connect\nadrep 3954/tcp # AD Replication RPC\nadrep 3954/udp # AD Replication RPC\np2pcommunity 3955/tcp # p2pCommunity\np2pcommunity 3955/udp # p2pCommunity\ngvcp 3956/tcp # GigE Vision Control\ngvcp 3956/udp # GigE Vision Control\nmqe-broker 3957/tcp # MQEnterprise Broker\nmqe-broker 3957/udp # MQEnterprise Broker\nmqe-agent 3958/tcp # MQEnterprise Agent\nmqe-agent 3958/udp # MQEnterprise Agent\ntreehopper 3959/tcp # Tree Hopper Networking\ntreehopper 3959/udp # Tree Hopper Networking\nbess 3960/tcp # Bess Peer Assessment\nbess 3960/udp # Bess Peer Assessment\nproaxess 3961/tcp # ProAxess Server\nproaxess 3961/udp # ProAxess Server\nsbi-agent 3962/tcp # SBI Agent Protocol\nsbi-agent 3962/udp # SBI Agent Protocol\nthrp 3963/tcp # Teran Hybrid Routing Protocol\nthrp 3963/udp # Teran Hybrid Routing Protocol\nsasggprs 3964/tcp # SASG GPRS\nsasggprs 3964/udp # SASG GPRS\nati-ip-to-ncpe 3965/tcp # Avanti IP to NCPE API\nati-ip-to-ncpe 3965/udp # Avanti IP to NCPE API\nbflckmgr 3966/tcp # BuildForge Lock Manager\nbflckmgr 3966/udp # BuildForge Lock Manager\nppsms 3967/tcp # PPS Message Service\nppsms 3967/udp # PPS Message Service\nianywhere-dbns 3968/tcp # iAnywhere DBNS\nianywhere-dbns 3968/udp # iAnywhere DBNS\nlandmarks 3969/tcp # Landmark Messages\nlandmarks 3969/udp # Landmark Messages\nlanrevagent 3970/tcp # LANrev Agent\nlanrevagent 3970/udp # LANrev Agent\nlanrevserver 3971/tcp # LANrev Server\nlanrevserver 3971/udp # LANrev Server\niconp 3972/tcp # ict-control Protocol\niconp 3972/udp # ict-control Protocol\nprogistics 3973/tcp # ConnectShip Progistics\nprogistics 3973/udp # ConnectShip Progistics\ncitysearch 3974/tcp # Remote Applicant Tracking Service\ncitysearch 3974/udp # Remote Applicant Tracking Service\nairshot 3975/tcp # Air Shot\nairshot 3975/udp # Air Shot\nopswagent 3976/tcp # Opsware Agent\nopswagent 3976/udp # Opsware Agent\nopswmanager 3977/tcp # Opsware Manager\nopswmanager 3977/udp # Opsware Manager\nsecure-cfg-svr 3978/tcp # Secured Configuration Server\nsecure-cfg-svr 3978/udp # Secured Configuration Server\nsmwan 3979/tcp # Smith Micro Wide Area Network Service\nsmwan 3979/udp # Smith Micro Wide Area Network Service\nacms 3980/tcp # Aircraft Cabin Ma", 4096) = 4096 703120 17:32:32.597607 <... read resumed> "ript 4118/udp # Netadmin Systems NETscript service\nassuria-slm 4119/tcp # Assuria Log Manager\nassuria-slm 4119/udp # Assuria Log Manager\ne-builder 4121/tcp # e-Builder Application Communication\ne-builder 4121/udp # e-Builder Application Communication\nfprams 4122/tcp # Fiber Patrol Alarm Service\nfprams 4122/udp # Fiber Patrol Alarm Service\nz-wave 4123/tcp # Zensys Z-Wave Control Protocol\nz-wave 4123/udp # Zensys Z-Wave Control Protocol\ntigv2 4124/tcp # Rohill TetraNode Ip Gateway v2\ntigv2 4124/udp # Rohill TetraNode Ip Gateway v2\nopsview-envoy 4125/tcp # Opsview Envoy\nopsview-envoy 4125/udp # Opsview Envoy\nddrepl 4126/tcp # Data Domain Replication Service\nddrepl 4126/udp # Data Domain Replication Service\nunikeypro 4127/tcp # NetUniKeyServer\nunikeypro 4127/udp # NetUniKeyServer\nnufw 4128/tcp # NuFW decision delegation protocol\nnufw 4128/udp # NuFW decision delegation protocol\nnuauth 4129/tcp # NuFW authentication protocol\nnuauth 4129/udp # NuFW authentication protocol\nfronet 4130/tcp # FRONET message protocol\nfronet 4130/udp # FRONET message protocol\nstars 4131/tcp # Global Maintech Stars\nstars 4131/udp # Global Maintech Stars\nnuts_dem 4132/tcp # NUTS Daemon\nnuts_dem 4132/udp # NUTS Daemon\nnuts_bootp 4133/tcp # NUTS Bootp Server\nnuts_bootp 4133/udp # NUTS Bootp Server\nnifty-hmi 4134/tcp # NIFTY-Serve HMI protocol\nnifty-hmi 4134/udp # NIFTY-Serve HMI protocol\ncl-db-attach 4135/tcp # Classic Line Database Server Attach\ncl-db-attach 4135/udp # Classic Line Database Server Attach\ncl-db-request 4136/tcp # Classic Line Database Server Request\ncl-db-request 4136/udp # Classic Line Database Server Request\ncl-db-remote 4137/tcp # Classic Line Database Server Remote\ncl-db-remote 4137/udp # Classic Line Database Server Remote\nnettest 4138/tcp # nettest\nnettest 4138/udp # nettest\nthrtx 4139/tcp # Imperfect Networks Server\nthrtx 4139/udp # Imperfect Networks Server\ncedros_fds 4140/tcp # Cedros Fraud Detection System\ncedros_fds 4140/udp # Cedros Fraud Detection System\noirtgsvc 4141/tcp # Workflow Server\noirtgsvc 4141/udp # Workflow Server\noidocsvc 4142/tcp # Document Server\noidocsvc 4142/udp # Document Server\noidsr 4143/tcp # Document Replication\noidsr 4143/udp # Document Replication\nvvr-control 4145/tcp # VVR Control\nvvr-control 4145/udp # VVR Control\ntgcconnect 4146/tcp # TGCConnect Beacon\ntgcconnect 4146/udp # TGCConnect Beacon\nvrxpservman 4147/tcp # Multum Service Manager\nvrxpservman 4147/udp # Multum Service Manager\nhhb-handheld 4148/tcp # HHB Handheld Client\nhhb-handheld 4148/udp # HHB Handheld Client\nagslb 4149/tcp # A10 GSLB Service\nagslb 4149/udp # A10 GSLB Service\nPowerAlert-nsa 4150/tcp # PowerAlert Network Shutdown Agent\nPowerAlert-nsa 4150/udp # PowerAlert Network Shutdown Agent\nmenandmice_noh 4151/tcp # Men & Mice Remote Co", 4096) = 4096 703120 17:32:32.598067 <... read resumed> " 4349/tcp # File System Port Map\nfsportmap 4349/udp # File System Port Map\nnet-device 4350/tcp # Net Device\nnet-device 4350/udp # Net Device\nplcy-net-svcs 4351/tcp # PLCY Net Services\nplcy-net-svcs 4351/udp # PLCY Net Services\npjlink 4352/tcp # Projector Link\npjlink 4352/udp # Projector Link\nf5-iquery 4353/tcp # F5 iQuery\nf5-iquery 4353/udp # F5 iQuery\nqsnet-trans 4354/tcp # QSNet Transmitter\nqsnet-trans 4354/udp # QSNet Transmitter\nqsnet-workst 4355/tcp # QSNet Workstation\nqsnet-workst 4355/udp # QSNet Workstation\nqsnet-assist 4356/tcp # QSNet Assistant\nqsnet-assist 4356/udp # QSNet Assistant\nqsnet-cond 4357/tcp # QSNet Conductor\nqsnet-cond 4357/udp # QSNet Conductor\nqsnet-nucl 4358/tcp # QSNet Nucleus\nqsnet-nucl 4358/udp # QSNet Nucleus\nomabcastltkm 4359/tcp # OMA BCAST Long-Term Key Messages\nomabcastltkm 4359/udp # OMA BCAST Long-Term Key Messages\nmatrix_vnet 4360/tcp # Matrix VNet Communication Protocol\nnacnl 4361/udp # Navcom Discovery and Control Port\nwxbrief 4368/tcp # WeatherBrief Direct\nwxbrief 4368/udp # WeatherBrief Direct\nepmd 4369/tcp # Erlang Port Mapper Daemon\nepmd 4369/udp # Erlang Port Mapper Daemon\nelpro_tunnel 4370/tcp # ELPRO V2 Protocol Tunnel\nelpro_tunnel 4370/udp # ELPRO V2 Protocol Tunnel\nl2c-connect 4371/tcp # LAN 2 CAN connection service\nl2c-info 4372/tcp # LAN 2 CAN information service\nremctl 4373/tcp # Remote Authenticated Command Service\nremctl 4373/udp # Remote Authenticated Command Service\npsi-ptt 4374/tcp # PSI Push-to-Talk Protocol\ntolteces 4375/tcp # Toltec EasyShare\ntolteces 4375/udp # Toltec EasyShare\nbip 4376/tcp # BioAPI Interworking\nbip 4376/udp # BioAPI Interworking\ncp-spxsvr 4377/tcp # Cambridge Pixel SPx Server\ncp-spxsvr 4377/udp # Cambridge Pixel SPx Server\ncp-spxdpy 4378/tcp # Cambridge Pixel SPx Display\ncp-spxdpy 4378/udp # Cambridge Pixel SPx Display\nctdb 4379/tcp # CTDB\nctdb 4379/udp # CTDB\nxandros-cms 4389/tcp # Xandros Community Management Service\nxandros-cms 4389/udp # Xandros Community Management Service\nwiegand 4390/tcp # Physical Access Control\nwiegand 4390/udp # Physical Access Control\napwi-imserver 4391/tcp # American Printware IMServer Protocol\napwi-rxserver 4392/tcp # American Printware RXServer Protocol\napwi-rxspooler 4393/tcp # American Printware RXSpooler Protocol\napwi-disc 4394/udp # American Printware Discovery\nomnivisionesx 4395/tcp # OmniVision communication for Virtual environments\nomnivisionesx 4395/udp # OmniVision communication for Virtual environments\nfly 4396/tcp # Fly Object Space\nds-srv 4400/tcp # ASIGRA Services\nds-srv 4400/udp # ASIGRA Services\nds-srvr 4401/tcp # ASIGRA Televaulting DS-System Service\nds-srvr 4401/udp # ASIGRA Televaulting DS-System Service\nds-clnt 4402/tcp # ASIGRA Televaulting DS-Client Service\nds-clnt 4402/udp # ASIGRA Televaulting DS-Client S", 4096) = 4096 703120 17:32:32.599943 <... read resumed> "rrayd 5434/tcp # SGI Array Services Daemon\nsgi-arrayd 5434/udp # SGI Array Services Daemon\nsceanics 5435/tcp # SCEANICS situation and action notification\nsceanics 5435/udp # SCEANICS situation and action notification\nspss 5443/tcp # Pearson HTTPS\nspss 5443/udp # Pearson HTTPS\nsurebox 5453/tcp # SureBox\nsurebox 5453/udp # SureBox\napc-5454 5454/tcp # APC 5454\napc-5454 5454/udp # APC 5454\napc-5455 5455/tcp # APC 5455\napc-5455 5455/udp # APC 5455\napc-5456 5456/tcp # APC 5456\napc-5456 5456/udp # APC 5456\nsilkmeter 5461/tcp # SILKMETER\nsilkmeter 5461/udp # SILKMETER\nttl-publisher 5462/tcp # TTL Publisher\nttl-publisher 5462/udp # TTL Publisher\nttlpriceproxy 5463/tcp # TTL Price Proxy\nttlpriceproxy 5463/udp # TTL Price Proxy\nquailnet 5464/tcp # Quail Networks Object Broker\nquailnet 5464/udp # Quail Networks Object Broker\nnetops-broker 5465/tcp # NETOPS-BROKER\nnetops-broker 5465/udp # NETOPS-BROKER\nfcp-addr-srvr1 5500/tcp # fcp-addr-srvr1\nfcp-addr-srvr1 5500/udp # fcp-addr-srvr1\nfcp-addr-srvr2 5501/tcp # fcp-addr-srvr2\nfcp-addr-srvr2 5501/udp # fcp-addr-srvr2\nfcp-srvr-inst1 5502/tcp # fcp-srvr-inst1\nfcp-srvr-inst1 5502/udp # fcp-srvr-inst1\nfcp-srvr-inst2 5503/tcp # fcp-srvr-inst2\nfcp-srvr-inst2 5503/udp # fcp-srvr-inst2\nfcp-cics-gw1 5504/tcp # fcp-cics-gw1\nfcp-cics-gw1 5504/udp # fcp-cics-gw1\ncheckoutdb 5505/tcp # Checkout Database\ncheckoutdb 5505/udp # Checkout Database\nsgi-eventmond 5553/tcp # SGI Eventmond Port\nsgi-eventmond 5553/udp # SGI Eventmond Port\nsgi-esphttp 5554/tcp # SGI ESP HTTP\nsgi-esphttp 5554/udp # SGI ESP HTTP\npersonal-agent 5555/tcp # Personal Agent\npersonal-agent 5555/udp # Personal Agent\nfreeciv 5556/tcp # Freeciv gameplay\nfreeciv 5556/udp # Freeciv gameplay\nwestec-connect 5566/tcp # Westec Connect\nm-oap 5567/tcp # Multicast Object Access Protocol\nm-oap 5567/udp # Multicast Object Access Protocol\nsdt 5568/tcp # Session Data Transport Multicast\nsdt 5568/udp # Session Data Transport Multicast\nsdmmp 5573/tcp # SAS Domain Management Messaging Protocol\nsdmmp 5573/udp # SAS Domain Management Messaging Protocol\nlsi-bobcat 5574/tcp # SAS IO Forwarding\nfdtracks 5579/tcp # FleetDisplay Tracking Service\ntmosms0 5580/tcp # T-Mobile SMS Protocol Message 0\ntmosms0 5580/udp # T-Mobile SMS Protocol Message 0\ntmosms1 5581/tcp # T-Mobile SMS Protocol Message 1\ntmosms1 5581/udp # T-Mobile SMS Protocol Message 1\nfac-restore 5582/tcp # T-Mobile SMS Protocol Message 3\nfac-restore 5582/udp # T-Mobile SMS Protocol Message 3\ntmo-icon-sync 5583/tcp # T-Mobile SMS Protocol Message 2\ntmo-icon-sync 5583/udp # T-Mobile SMS Protocol Message 2\nbis-web 5584/tcp # BeInSync-Web\nbis-web 5584/udp # BeInSync-Web\nbis-sync 5585/tcp # BeInSync-sync\nbis-sync 5585/udp # BeInSync-sync\nininmessaging 5597/tcp # inin secure messaging\nininmess", 4096) = 4096 703120 17:32:32.601188 <... read resumed> " # Kerberos V5 FTP Data\nkftp-data 6620/udp # Kerberos V5 FTP Data\nkftp 6621/tcp # Kerberos V5 FTP Control\nkftp 6621/udp # Kerberos V5 FTP Control\nmcftp 6622/tcp # Multicast FTP\nmcftp 6622/udp # Multicast FTP\nktelnet 6623/tcp # Kerberos V5 Telnet\nktelnet 6623/udp # Kerberos V5 Telnet\nwago-service 6626/tcp # WAGO Service and Update\nwago-service 6626/udp # WAGO Service and Update\nnexgen 6627/tcp # Allied Electronics NeXGen\nnexgen 6627/udp # Allied Electronics NeXGen\nafesc-mc 6628/tcp # AFE Stock Channel M/C\nafesc-mc 6628/udp # AFE Stock Channel M/C\nmxodbc-connect 6632/tcp # eGenix mxODBC Connect\nircu 6665/tcp # IRCU\nircu 6665/udp # IRCU\nircu-2 6666/tcp # IRCU\nircu-2 6666/udp # IRCU\nircu-3 6667/tcp ircd # IRCU\nircu-3 6667/udp ircd # IRCU\nircu-4 6668/tcp # IRCU\nircu-4 6668/udp # IRCU\nircu-5 6669/tcp # IRCU\nircu-5 6669/udp # IRCU\nvocaltec-gold 6670/tcp # Vocaltec Global Online Directory\nvocaltec-gold 6670/udp # Vocaltec Global Online Directory\np4p-portal 6671/tcp # P4P Portal Service\np4p-portal 6671/udp # P4P Portal Service\nvision_server 6672/tcp # vision_server\nvision_server 6672/udp # vision_server\nvision_elmd 6673/tcp # vision_elmd\nvision_elmd 6673/udp # vision_elmd\nclever-tcpip 6688/tcp # CleverView for TCP/IP Message Service\ntsa 6689/tcp # Tofino Security Appliance\ntsa 6689/udp # Tofino Security Appliance\nfrc-hp 6700/sctp # ForCES HP (High Priority) channel\nkti-icad-srvr 6701/tcp # KTI/ICAD Nameserver\nkti-icad-srvr 6701/udp # KTI/ICAD Nameserver\nfrc-mp 6701/sctp # ForCES MP (Medium Priority) channel\nfrc-lp 6702/sctp # ForCES LP (Low priority) channel\ne-design-net 6702/tcp # e-Design network\ne-design-net 6702/udp # e-Design network\ne-design-web 6703/tcp # e-Design web\ne-design-web 6703/udp # e-Design web\nibprotocol 6714/tcp # Internet Backplane Protocol\nibprotocol 6714/udp # Internet Backplane Protocol\nfibotrader-com 6715/tcp # Fibotrader Communications\nfibotrader-com 6715/udp # Fibotrader Communications\nbmc-perf-agent 6767/tcp # BMC PERFORM AGENT\nbmc-perf-agent 6767/udp # BMC PERFORM AGENT\nbmc-perf-mgrd 6768/tcp # BMC PERFORM MGRD\nbmc-perf-mgrd 6768/udp # BMC PERFORM MGRD\nadi-gxp-srvprt 6769/tcp # ADInstruments GxP Server\nadi-gxp-srvprt 6769/udp # ADInstruments GxP Server\nplysrv-http 6770/tcp # PolyServe http\nplysrv-http 6770/udp # PolyServe http\nplysrv-https 6771/tcp # PolyServe https\nplysrv-https 6771/udp # PolyServe https\ndgpf-exchg 6785/tcp # DGPF Individual Exchange\ndgpf-exchg 6785/udp # DGPF Individual Exchange\nsmc-jmx 6786/tcp # Sun Java Web Console JMX\nsmc-jmx 6786/udp # Sun Java Web Console JMX\nsmc-admin 6787/tcp # Sun Web Console Admin\nsmc-admin 6787/udp # Sun Web Console Admin\nsmc-http 6788/tcp # SMC-HTTP\nsmc-http 6788/udp # SMC-HTTP\nsmc-https 6789/tcp ", 4096) = 4096 703120 17:32:32.602917 <... read resumed> " # Dynamic Device Discovery\napani1 9160/tcp # apani1\napani1 9160/udp # apani1\napani2 9161/tcp # apani2\napani2 9161/udp # apani2\napani3 9162/tcp # apani3\napani3 9162/udp # apani3\napani4 9163/tcp # apani4\napani4 9163/udp # apani4\napani5 9164/tcp # apani5\napani5 9164/udp # apani5\nsun-as-jpda 9191/tcp # Sun AppSvr JPDA\nsun-as-jpda 9191/udp # Sun AppSvr JPDA\nwap-wsp 9200/tcp # WAP connectionless session service\nwap-wsp 9200/udp # WAP connectionless session service\nwap-wsp-wtp 9201/tcp # WAP session service\nwap-wsp-wtp 9201/udp # WAP session service\nwap-wsp-s 9202/tcp # WAP secure connectionless session service\nwap-wsp-s 9202/udp # WAP secure connectionless session service\nwap-wsp-wtp-s 9203/tcp # WAP secure session service\nwap-wsp-wtp-s 9203/udp # WAP secure session service\nwap-vcard 9204/tcp # WAP vCard\nwap-vcard 9204/udp # WAP vCard\nwap-vcal 9205/tcp # WAP vCal\nwap-vcal 9205/udp # WAP vCal\nwap-vcard-s 9206/tcp # WAP vCard Secure\nwap-vcard-s 9206/udp # WAP vCard Secure\nwap-vcal-s 9207/tcp # WAP vCal Secure\nwap-vcal-s 9207/udp # WAP vCal Secure\nrjcdb-vcards 9208/tcp # rjcdb vCard\nrjcdb-vcards 9208/udp # rjcdb vCard\nalmobile-system 9209/tcp # ALMobile System Service\nalmobile-system 9209/udp # ALMobile System Service\noma-mlp 9210/tcp # OMA Mobile Location Protocol\noma-mlp 9210/udp # OMA Mobile Location Protocol\noma-mlp-s 9211/tcp # OMA Mobile Location Protocol Secure\noma-mlp-s 9211/udp # OMA Mobile Location Protocol Secure\nserverviewdbms 9212/tcp # Server View dbms access\nserverviewdbms 9212/udp # Server View dbms access\nserverstart 9213/tcp # ServerStart RemoteControl\nserverstart 9213/udp # ServerStart RemoteControl\nipdcesgbs 9214/tcp # IPDC ESG BootstrapService\nipdcesgbs 9214/udp # IPDC ESG BootstrapService\ninsis 9215/tcp # Integrated Setup and Install Service\ninsis 9215/udp # Integrated Setup and Install Service\nacme 9216/tcp # Aionex Communication Management Engine\nacme 9216/udp # Aionex Communication Management Engine\nfsc-port 9217/tcp # FSC Communication Port\nfsc-port 9217/udp # FSC Communication Port\nteamcoherence 9222/tcp # QSC Team Coherence\nteamcoherence 9222/udp # QSC Team Coherence\nMon 9255/tcp # Manager On Network\nMon 9255/udp # Manager On Network\npegasus 9278/tcp # Pegasus GPS Platform\npegasus 9278/udp # Pegasus GPS Platform\npegasus-ctl 9279/tcp # Pegaus GPS System Control Interface\npegasus-ctl 9279/udp # Pegaus GPS System Control Interface\npgps 9280/tcp # Predicted GPS\npgps 9280/udp # Predicted GPS\nswtp-port1 9281/tcp # SofaWare transport port 1\nswtp-port1 9281/udp # SofaWare transport port 1\nswtp-port2 9282/tcp # SofaWare transport port 2\nswtp-port2 9282/udp # SofaWare transport port 2\ncallwaveiam 9283/tcp # CallWaveIAM\ncallwaveiam 9283/udp # CallWaveIAM\nvisd 928", 4096) = 4096 703120 17:32:32.604025 <... read resumed> "vr-2 14937/tcp # hde-lcesrvr-2\nhde-lcesrvr-2 14937/udp # hde-lcesrvr-2\nhydap 15000/tcp # Hypack Data Aquisition\nhydap 15000/udp # Hypack Data Aquisition\nxpilot 15345/tcp # XPilot Contact Port\nxpilot 15345/udp # XPilot Contact Port\n3link 15363/tcp # 3Link Negotiation\n3link 15363/udp # 3Link Negotiation\ncisco-snat 15555/tcp # Cisco Stateful NAT\ncisco-snat 15555/udp # Cisco Stateful NAT\nbex-xr 15660/tcp # Backup Express Restore Server\nbex-xr 15660/udp # Backup Express Restore Server\nptp 15740/tcp # Picture Transfer Protocol\nptp 15740/udp # Picture Transfer Protocol\nsun-sea-port 16161/tcp # Solaris SEA Port\nsun-sea-port 16161/udp # Solaris SEA Port\nsolaris-audit 16162/tcp # Solaris Audit - secure remote audit log\netb4j 16309/tcp # etb4j\netb4j 16309/udp # etb4j\npduncs 16310/tcp # Policy Distribute, Update Notification\npduncs 16310/udp # Policy Distribute, Update Notification\npdefmns 16311/tcp # Policy definition and update management\npdefmns 16311/udp # Policy definition and update management\nnetserialext1 16360/tcp # Network Serial Extension Ports One\nnetserialext1 16360/udp # Network Serial Extension Ports One\nnetserialext2 16361/tcp # Network Serial Extension Ports Two\nnetserialext2 16361/udp # Network Serial Extension Ports Two\nnetserialext3 16367/tcp # Network Serial Extension Ports Three\nnetserialext3 16367/udp # Network Serial Extension Ports Three\nnetserialext4 16368/tcp # Network Serial Extension Ports Four\nnetserialext4 16368/udp # Network Serial Extension Ports Four\nconnected 16384/tcp # Connected Corp\nconnected 16384/udp # Connected Corp\nxoms 16619/tcp # X509 Objects Management Service\nnewbay-snc-mc 16900/tcp # Newbay Mobile Client Update Service\nnewbay-snc-mc 16900/udp # Newbay Mobile Client Update Service\nsgcip 16950/tcp # Simple Generic Client Interface Protocol\nsgcip 16950/udp # Simple Generic Client Interface Protocol\nintel-rci-mp 16991/tcp # INTEL-RCI-MP\nintel-rci-mp 16991/udp # INTEL-RCI-MP\namt-soap-http 16992/tcp # Intel(R) AMT SOAP/HTTP\namt-soap-http 16992/udp # Intel(R) AMT SOAP/HTTP\namt-soap-https 16993/tcp # Intel(R) AMT SOAP/HTTPS\namt-soap-https 16993/udp # Intel(R) AMT SOAP/HTTPS\namt-redir-tcp 16994/tcp # Intel(R) AMT Redirection/TCP\namt-redir-tcp 16994/udp # Intel(R) AMT Redirection/TCP\namt-redir-tls 16995/tcp # Intel(R) AMT Redirection/TLS\namt-redir-tls 16995/udp # Intel(R) AMT Redirection/TLS\nisode-dua 17007/tcp #\nisode-dua 17007/udp #\nsoundsvirtual 17185/tcp # Sounds Virtual\nsoundsvirtual 17185/udp # Sounds Virtual\nchipper 17219/tcp # Chipper\nchipper 17219/udp # Chipper\nssh-mgmt 17235/tcp # SSH Tectia Manager\nssh-mgmt 17235/udp # SSH Tectia Manager\nea 17729/tcp # Eclipse Aviation\nea 17729/udp # Eclipse Aviation\nzep 17754/tcp # Encap. ZigBee Packets\nzep 17754/udp # Encap. ZigBee Packets\nzigbee-ip 17755/tcp # ZigBee IP Transport Service\nzigbee-ip 17755/udp # ZigBee IP Transport Service\nz", 4096) = 4096 703120 17:32:32.605528 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703120 17:32:32.605579 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.605758 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703120 17:32:32.605805 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.611493 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703120 17:32:32.611541 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.611737 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703120 17:32:32.611784 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703120 17:32:32.615416 connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16 703120 17:32:32.615468 <... connect resumed> ) = 0 703120 17:32:32.617112 connect(5, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16 703120 17:32:32.617503 <... connect resumed> ) = 0 703121 17:32:32.629394 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703121 17:32:32.629441 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703121 17:32:32.629645 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110 703121 17:32:32.629690 <... connect resumed> ) = -1 ENOENT (No such file or directory) 703121 17:32:32.640471 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703121 17:32:32.640690 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703121 17:32:32.645320 connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 703121 17:32:32.647463 connect(4, {sa_family=AF_INET, sin_port=htons(15001), sin_addr=inet_addr("147.231.25.5")}, 16) = -1 EINPROGRESS (Operation now in progress) 703121 17:32:32.648690 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703121 17:32:32.649020 connect(6, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703122 17:32:32.688287 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703122 17:32:32.688475 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 703123 17:32:32.716703 connect(3, {sa_family=AF_LOCAL, sun_path="/etc/entropy"}, 14) = -1 ENOENT (No such file or directory) 4126 17:32:32.827480 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:32:32.829165 connect(17, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:32:32.989343 connect(18, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 4126 17:32:46.378290 connect(17, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:32:46.380423 connect(17, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:32:46.388876 connect(18, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.38")}, 16) = 0 4126 17:32:46.390760 connect(18, {sa_family=AF_INET, sin_port=htons(49390), sin_addr=inet_addr("129.79.53.27")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:32:46.399304 connect(20, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("147.231.25.14")}, 16) = 0 4126 17:32:46.401392 connect(20, {sa_family=AF_INET, sin_port=htons(45242), sin_addr=inet_addr("169.228.38.36")}, 16) = -1 EINPROGRESS (Operation now in progress) 4126 17:34:05.111295 connect(16, {sa_family=AF_LOCAL, sun_path="/var/lib/sss/pipes/nss"}, 110) = 0