Ubuntu Linux Security Question

[zappa86]

I have ubuntu 5.04 installed. I did a netstat -l to see what was opened on my system and I found several entries like:
unix 2 [ ACC ] STREAM LISTENING 13734 /tmp/orbit-harry/linc-226f-0-1bac2d62a9d22

and

unix 2 [ ACC ] STREAM LISTENING 13186 @/tmp/dbus-hIk2dV0DVj

I'm somewhat new to linux, however in windows I know that programs in the tmp directory that look that that can be problems? is this normal or do I have a virus or worm or something?

 

[BollWeevil]

In unix/linux, there are sockets not only for communication between hosts on a network, but also sockets for passing information between two processes running on the same computer, known as unix domain sockets. Say you have one program that needs to pass information to another in a producer-consumer fashion. One way of passing the data would be through the use of unix sockets.

So when you do a netstat, pay close attention to the categories. You should see at least two sections:

Active Internet connections
Active UNIX domain sockets

Unix domain sockets should not be accessible through the internet--they are not bound to TCP or UDP protocols.

 

[zappa86]

Good Explination. Thank you very much.