What's the application of UDP port 59311?

Discussion in 'Linux VPS - Plesk' started by core2, Aug 27, 2008.

  1. core2

    core2 New Member

    Hello

    I'm seeing an active UDP connection to port 59311 , can any friend here help me what's the purpose of this connection?

    This port can't be closed using iptables or any other method.

    I have a Linux/Virtuozzo + Plesk VPS with Knownhost , KH is great :)
     
  2. KH-Paul

    KH-Paul CTO Staff Member

    core2,

    You can see the process that is responsible for the connection on this port using the following command:

    Code:
    netstat -anp | grep 59311
    
     
  3. core2

    core2 New Member

    Using # netstat -anp --udp I see there are some connections relating port 53 , in addition there is the above mentioned connection , the process is "named" too , should name server use UDP port 59311? Is it a normal connection in Virtuozzo?

    I see this report :

    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    udp 0 0 0.0.0.0:59311 0.0.0.0:* 24146/named
    udp 0 0 67.x.x.x:53 0.0.0.0:* 24146/named
    udp 0 0 67.x.x.x:53 0.0.0.0:* 24146/named
    udp 0 0 127.0.0.1:53 0.0.0.0:* 24146/named


    Could not find any info on the web and this is the first time I see this port number.
     
  4. KH-Paul

    KH-Paul CTO Staff Member

    core2,

    This is normal and nothing to be afraid of. This output shows that named is listening on port 53 as it should plus it is listening on one more port where it expects some data to be received from remote nameserver. You're basically seeing nameserver port randomization feature in action
     
  5. core2

    core2 New Member

    Thank you , now I'm happy that it's not a malicious connection.
     

Share This Page