RE: Port Zero

From: Wimpie du Plessis (wimpie_at_issecurity.co.za)
Date: 07/18/05

  • Next message: Jim Harrison (ISA): "RE: Port Zero" 
    To: <omibaba@gmail.com>, <incidents@securityfocus.com>
Date: Mon, 18 Jul 2005 08:59:27 +0200

    Hi, I would think that it is cause it is listening and therefore it wont
    know the foreign address source port, thats why it is set to zero, it will
    accept any src port coming into that listening port.

    -----Original Message-----
    From: omibaba@gmail.com [mailto:omibaba@gmail.com]
    Sent: Saturday, July 16, 2005 6:14 AM
    To: incidents@securityfocus.com
    Subject: Port Zero

    Active Connections

      Proto Local Address Foreign Address State
      TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1028 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1054 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1307 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1344 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1445 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1447 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1452 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1453 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1455 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1460 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1465 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1466 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1469 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1491 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1496 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1498 0.0.0.0:0 LISTENING
      TCP 0.0.0.0:1507 0.0.0.0:0 LISTENING

    Above is the output of netstat -an |more

    Guys / Gals Do you know what means port zero in Windoze Platform ? I know
    the answer but jst wanted to know anyone has a better explaination.

    In Unix Family port zero is used for socket programming but not the same in
    Windoze family.

    I have asked this question in many programs of mine in CEH - Certfied
    Ethical Hacking but still awaiting for answers. Lemme see if can get some
    answers for this post!!!!

    Ciao

    Baba
    CEO
    Appsec

  • Next message: Jim Harrison (ISA): "RE: Port Zero"

    Relevant Pages

    • Re: Create Virtual com port zero on wince 6
      ... Can you please help me in configuring Virtual comm port zero. ...
      (microsoft.public.windowsce.platbuilder)
    • RE: Port Zero
      ... traffic from (Foreign address) any IP and any port. ... Subject: Port Zero ... I would think that it is cause it is listening and therefore it wont ...
      (Incidents)
    • Re: Survive without ICMP?
      ... > Another potential for port 0 ICMP packet returns. ... > originating from port zero. ... > authorative source ICMP packets cannot source ...
      (comp.security.firewalls)
    • RE: Which resource am I running out of here?
      ... I'm opening over 4000 TCP connections at once. ... or just bind to port zero and *hope* the kernel does the right thing under ... the kernel to do the right thing when you have an exceptional situation. ... can probe for 'hifirst' and 'hilast' and pick a port between those two. ...
      (freebsd-stable)
    • Re: Best Plan of action for 2 forest.......
      ... PortQry reports the status of a port in one of the following ways: ... ..LISTENING This response indicates that a process is listening on the target ...
      (microsoft.public.windows.server.active_directory)