Port 999 Garcon?

[al_platt]

I'm in the process of harding our JSS and found an oddity when running a port scan.

Open TCP Port: 999 garcon

lsof -i :999 shows

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
rpc.rquot 580 root 6u IPv4 0xe5770fc9e1920153 0t0 TCP *:garcon (LISTEN)

Does anyone know what this process is and why it has an open port?

[Aaron]

Is your JSS running on a Linux server? If so, it is most likely a freedesktop.org thingy (XFCE in particular)

[al_platt]

No Linux, just 10.11.1 updated from 10.10.5

[Aaron]

Turns out I've got this running as well on my 10.10.5 server. The more you know.

Reading around, it might be related to 3rd party support of remote filesystems (http://linux.die.net/man/8/rpc.rquotad), but I don't use NFS. I do have a Promise Pegasus connected with the Promise Utility installed. Or maybe it's something that gets added in with the OSX Server Package?

[al_platt]

Interesting, I also have a Promise Pegasus. Never seen it before with Server.app but not really been looking.. Might check another build to be sure..