Re: All Ports open on IIS Server?
From: Don Kelloway (dkelloway_at_commodon.com)
Date: Mon, 11 Oct 2004 03:37:52 GMT
"donnie" <firstname.lastname@example.org> wrote in message
> system reveals:
>> Proto Local Address Foreign Address State PID
>> TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
>> TCP 0.0.0.0:25 0.0.0.0:0 LISTENING
>> TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
>> TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
>>Note the PID number in the last column? This indicates the Process ID
>>number of the service/application responsible. In this example you will
>>that ports 21, 25, 80 and 443 are in a listening state the result of which
>>is attributed to PID 1532, which is the PID associated with IIS.
>>For you to determine the appropriate PID on your system simply view Task
>>Manager or run the following command.
>>Match the PID with the results of the NETSTAT and you'll learn the
> What determiines when the netstat output uses zeros as the IP address
> as opposed to 127.0.0.1 or the actual IP of the machine?
When you see '0.0.0.0' it indicates that the service/application indicated
by the PID is capable of listening on all IP's bound to the NIC.
When you see '127.0.0.1' it indicates that the system itself is using the
loopback for communication to itself and such is not an accessible from the
-- Best regards, from Don Kelloway of Commodon Communications Visit http://www.commodon.com to learn about the "Threats to Your Security on the Internet".