Re: IDS Management - Port Numbers

From: Jamie French (J.French@whitehats.ca)
Date: 12/15/01


From: Jamie French <J.French@whitehats.ca>
Date: Sat, 15 Dec 2001 03:49:51 GMT
To: robert.d.turner@bt.com, focus-ids@securityfocus.com

I have created an online database that will accept submissions as well as
queries for numerous analytical data fields. The goal of this is to
house info that can be centralized and help other IS/IT security analysts
in identifying anomalous activity as well as be used as a training tool
for those new in the field.

I started working on it about 1 year ago and figured that I would make it
public and see how it grows. That way not only I benefit from it, but
everyone else benefits too!

Take a look at it and hopefully it will be used. It started out as a
port database but kind of evolved from there. Currently there are over
8000 entries but most of these are IANA ports with very few other fields
filled in.

Incidentally, CISCO Secure IDS uses UDP 45000 (if I remember correctly).

It is available at
http://www.whitehats.ca/main/tools/portquery2/portquery2.html

Regards,
Jamie French, GCIA

>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 2001-12-11, 14:17:18, robert.d.turner@bt.com wrote regarding IDS
Management - Port Numbers:

> Hi

> Does anyone know of a list of recognised (standard) port numbers for IDS/
> Firewall/Management applications? I've been looking around
intermittently
> for a while, and there does not seem to be a collected list.

> I'm looking for something along the lines of

> IDS Package A Client to Manager Bi-directional A,B,C
> IDS Package A Client to Manager D,E,F
> IDS Package A Manager to Client G,H,I
> IDS Package B .....
> IDS Package C .....
> Firewall Package A .....
> Management System A .....

> I would be prepared to collate a list if no-one knows of one, so if
anyone
> knows information about even one package this would be most useful.

> For information, this search follows taking over a security setup, and
> taking about three weeks to get full information from a vendor about the
> ports that needed punching through various firewalls!

> TIA

> Robert

> --
> Robert Turner GCIA
> Security Solutions Designer & Analyst

> Ignite Solutions - Secure Business Services
> T: +44 (0)113 244 5951 F: +44 (0)113 244 5657
> Robert.D.Turner@bt.com



Relevant Pages

  • Re: IDS Management - Port Numbers
    ... I think Robert was looking for IDS specific port numbers, ... IDS Management - Port Numbers ... IDS Management - Port Numbers ... > IDS Package A Client to Manager Bi-directional A,B,C ...
    (Focus-IDS)
  • RE: IDS Management - Port Numbers
    ... Does anyone know of a list of recognised port numbers for IDS/ ... Firewall/Management applications? ... IDS Package A Client to Manager Bi-directional A,B,C ...
    (Focus-IDS)
  • IDS Management - Port Numbers
    ... Does anyone know of a list of recognised port numbers for IDS/ ... Firewall/Management applications? ... IDS Package A Client to Manager Bi-directional A,B,C ...
    (Focus-IDS)