Or probably easier for people to access and use; the Network Utility in OS X (in /Applications/Utilities). Click on the Port Scan tab, type "localhost" and uncheck the "Only test..." box, and scan. A few ports will always be open; 631 on 10.2.x, for example, allows access to configure CUPS printing, and 1033 is there for NetInfo. These two, however, are only open to your own computer-localhost just loops your computer back to itself. If you want a slightly more accurate port scan, you can look in the TCP/IP tab of the Network preference pane for your IP address, and type that in the box instead of localhost. You can also type another computer's IP address, though it's best if you own the other computer; it is generally frowned upon to port scan somebody else's computer without their permission. Let it run for at least 5 minutes or so to let it get sufficiently high, there's usually nothing over about 10,000 that's open, though you can choose to let it run for a long time until it says "Port Scan Completed". Then, once you're done, head over to <http://www.iana.org/assignments/port-numbers> and look up all the services that are running on your computer. Personally, in addition to the two I listed above, I also have 80 (for my personal web server) and 3689 (iTunes music sharing) open, though since my network is done with NAT, I'm not at risk of anything. Since I keep good control over the web server and such, it doesn't bother me much even when I'm not behind my router. These two ports are the ONLY two that show up if I use my IP address instead of localhost. kerem unal <k_unal at freesurf.ch> writes: > May I suggest the use of a less OS dependent tool like nmap ??? > Kynan Shook kshook at mac.com http://homepage.mac.com/kshook/index.html