Why network port is open but no process attached?

When I check my system today, I noticed a weird output from netstat’s output,

joseph# sudo netstat -lnpt | grep 60023
tcp        0      0 0.0.0.0:60023               0.0.0.0:*                   LISTEN      -

There is no process attached to an open port. I used different command to try to address the process that attaches to this port, but all failed.

After searching around, I realized it’s an port opened by kernel, that’s why it won’t show up with program name. For the port like this, it may relate to NFS and OCFS stuff, or something like that, or it could be a kernel bug.  If you need to find more details, check kernel logs for OOPS and bug.

A nmap scan help me confirm my guess,

# nmap -sV -p 60023 localhost

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2014-07-03 07:32 GMT
Interesting ports on localhost.localdomain (127.0.0.1):
PORT      STATE SERVICE VERSION
60023/tcp open  rpc

Nmap finished: 1 IP address (1 host up) scanned in 6.154 seconds

=EOF

Share Button

Leave a comment

Your email address will not be published. Required fields are marked *