From mboxrd@z Thu Jan  1 00:00:00 1970
From: Wei Li <wei@eng.fsu.edu>
Subject: Help with portsentry
Date: Thu, 15 Apr 2004 10:30:28 -0400
Sender: linux-admin-owner@vger.kernel.org
Message-ID: <407E9C84.4050800@eng.fsu.edu>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <linux-admin-owner@vger.kernel.org>
List-Id: <linux-admin.vger.kernel.org>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
To: linux-admin@vger.kernel.org

Hi, all,

I installed portsentry in one of my machines and it gave me "attackalert 
from host:xxx:xxx:xx:xx to TCP port 635" every day and this message had 
been sent to me almost a year.

And when I use netstat to check the port, I got:
netstat -n -a | grep 635
      *.635                *.*                0      0 49152      0 LISTEN

Only portsentry opens port 635 to listen.

Some suggestion?

Thanks.