Re: mystery ports 1036,4729,44334

From: Dave Fraleigh (dave@fraleigh.net)
Date: 03/26/02 

From: dave@fraleigh.net (Dave Fraleigh)
Date: 26 Mar 2002 07:36:10 -0800

catcher39@www.com (Your name) wrote in message news:<5329378.0203251224.2a2fdf26@posting.google.com>...
> We did an nmap on an NT box running NT4sp6
>
> The following ports had a tcp - unknown listing:
> 1036
> 4729
> 44334
> They do not seem to be standard , so we are wondering "What are they?"

Try downloading fport from www.foundstone.com - it will tell you what
applications are associated with these open ports.

-d

Relevant Pages

  • RE: IM Programs
    ... want to block these ports. ... you don't need an explicit deny for the other ports. ... Access-list 101 deny any tcp any any eq 5000 ... >Now, when applying these to your firewall, make sure the number ...
    (Security-Basics)
  • Re: What should I block out with my new firewall software?
    ... >> block out that I don't use or need, like UDP or TCP. ... >> activity or attempts from outside hackers to penetrate these ports. ... never stop svchost from comunnicating on the Internet. ... > Web updates, as far as I know, are downloaded the same way that ...
    (comp.security.firewalls)
  • Re: Fingerprinting Windows O/S based on ports open?
    ... finger printing by open default ports is not always ... OS fingerprinting is not as plain and claer cut as it was perhaps a few ... settings in tcp packets. ... >> Looking for a better way to manage your IP security? ...
    (Pen-Test)
  • Re: NFS inconsistent behaviour
    ... of tcp connections in TIME_WAIT state. ... Why there are so many connections in waiting state? ... and remote port so the ports stay in use for a few minutes. ... I ran out of privileged ports due to treemounting on /net from about 50 ...
    (Linux-Kernel)
  • Re: Is there any legit reason for TCP scans?
    ... The TCP scan examines the 1,024 ports that are mainly reserved for TCP ... routers and proxies for users connecting to the Web site through such ... > anti-virus nor Stinger reports the presence of anything malicious. ...
    (comp.security.firewalls)