I've been doing a security audit on my Linux box, and I have three ports open that I would not like to have open, and I cannot identify.

111/TCP SUNRPC
139/TCP NETBIOS-SSN (I don't have Netbios service running.)
6000/TCP X11

My firewall doesn't seem to want to interfere with these, so I'm trying to find the services.

Any ideas, guys?