I don't think that nmap comes with the default install (it's not on my 
cds) As far as the logs, unless you have the kernel logging *everything* y 
ou probably won't see the port activity. That said nmap is a great tool 
which I use on my network to do exactly what you are talking about- 
finding out what is running.
You might also just look in inted.conf or xinetd.conf depending on the 
version of RH to find out what is setup to run. 

On Thu, 20 Dec 2001, Carl Parrish wrote:

> Is there anything like nmap on a *default* install of Redhat? I guess I 
> don't really need all the features of nmap. I just need to figure out if 
> a port is open and if its been active. Problem is I didn't set the 
> server up and don't know what's installed. any ideas of tools I should 
> look for? Or should I just install something? Is there any way to look 
> up past activity on a port?
> 
> Carl P.
> 
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 

-- 
Patrick Fleming, EA
Licensed to represent taxpayers
before Exam, Appeals, and Conference 
divisions of the IRS