What is cslistener?

Question

There seems to be a process called "cslistener" on my machine that is listening on port 9000. A scan using nmap resulted in this, where 172.29.137.150 is the address of my PC.

Nmap scan report for 172.29.137.150
Host is up (0.000013s latency).
Not shown: 993 closed ports
PORT      STATE SERVICE
22/tcp    open  ssh
80/tcp    open  http
139/tcp   open  netbios-ssn
443/tcp   open  https
445/tcp   open  microsoft-ds
9000/tcp  open  cslistener
10000/tcp open  snet-sensor-mgmt

What's going on here? I'm on ubuntu 12.04.

Usually I just run sudo netstat -antp | grep LISTEN on the machine that has ports open to quickly figure out who has the port open. I'd guess that nowadays port 9000 is actually Eclipse/XDebug or php-fpm (PHP FastCGI Process Manager) depending on the machine. — Mikko Rantalainen, Aug 10 '20 at 10:40

score 23 · Accepted Answer · answered Aug 16 '12 at 16:21

23

nmap doesn't show you which process is actually listening to some port but which service is registered with the IANA or otherwise known to use this port.

To find out which process is actually listening on that port you can use for example

 sudo fuser -v 9000/tcp

answered Aug 16 '12 at 16:21

Florian Diesch

87,389

1

Thanks, that command worked and it turns out Eclipse is listening on 9000. A quick search indicated that it is Xdebug for PHP. I've never actually used that tool, but I am developing a PHP application, and port 9000 is no longer used when Eclipse isn't running. – Kalle Elmér Aug 16 '12 at 21:09
If you wish to close the port, go to Window - Preferences - PHP - Installed PHPs and select the executable (usually only one possible choice) and click "Edit...". Select tab "Debugger" and select <none> as the Debugger. XDebug debugger protocol uses port 9000 by default and Eclipse XDebug support listens for whole world instead of just localhost. – Mikko Rantalainen Aug 10 '20 at 10:36

score 3 · Answer 2 · answered Dec 06 '12 at 16:03

3

It`s Sentry in default configuration - https://getsentry.com/

answered Dec 06 '12 at 16:03

beer

31

score 2 · Answer 3 · edited Jan 10 '13 at 17:56

2

Most likely if you get this you are running php-fpm (PHP FastCGI Process Manager) which runs on port 9000 by default.

On my web/app servers I udpate /etc/services and change cslistener to fastcgi so a lsof -i makes more sense and another admin doesn't wonder what cslistener is.

edited Jan 10 '13 at 17:56

Eric Carvalho

54,385

answered Jan 10 '13 at 16:44

Joey

21

score 0 · Answer 4 · edited Aug 20 '12 at 11:53

0

From what I've gathered from the internet, it might be your router's firewall, especially if you use a Buffalo router or firewall.

edited Aug 20 '12 at 11:53

nanofarad

20,717

answered Aug 16 '12 at 16:21

green

14,306

What is cslistener?

4 Answers4