Re: All Ports open on IIS Server?

From: Jeff Beck (nospam_at_yomama.com)
Date: 10/11/04 

Date: Mon, 11 Oct 2004 04:42:46 GMT

"Don Kelloway" <dkelloway@commodon.com> wrote in
news:kenad.15073$gs1.400@newsread2.news.atl.earthlink.net:

>>>
>>>C:\>netstat -ano
>>>

I don't have physical access to the machine in question to run netstat to
try and match up with the anomally that nmap reported. I agree that in
order for all those ports to be listed as open, a matching service should
be running too! That is why I'm wondering how or what spoofed nmap?

>>>For you to determine the appropriate PID on your system simply view
>>>Task Manager or run the following command.
>>>
>>>TASKLIST /SVC
>>>

I have been around PC's forever and never saw that command (tasklist). I
ran it today on XP and was reminded of #ps -ef on *nix. Then I tried it on
Win2k and realized it isn't there. Oh well, still worth remembering.

The server in question is running 2k also.

Quantcast