Re: Port Scans

From: David Robbins (drobbins@eprisolutions.com)
Date: 02/11/03 

From: "David Robbins" <drobbins@eprisolutions.com>
Date: Tue, 11 Feb 2003 12:46:14 -0500

yes, for tcp 'listening' means it is waiting for a connection on that port.

the *:* is for udp ports that are listening, since udp doesn't make
connections the way tcp does they are just listening with no specific
address... why it bothers to put that in i don't know, probably just reuse
of code for the output line.

"Paul" <Jokbum170@hotmail.com> wrote in message
news:0bf301c2d1ef$48c27e50$a601280a@phx.gbl...
> listening port: open for a connection, right? Also,
> netstat -a returns *:* for a number of ports, what does
> this signify? Thanks again.
> >-----Original Message-----
> >i like the tools package from www.samspade.org for
> researching ip addresses.
> >
> >as far as finding out what program is using what port
> there are some tools
> >out there for doing that, but i can't remember them off
> hand. maybe search
> >this group for other questions about ports. there is a
> generic list for
> >'well known' and 'registered' ports at
> >http://www.nxtphase.com/sub-products-apt_relays-lpro.htm
> that may give you
> >some idea of what most open ports are being used for.
> also 'netstat -a'
> >will identify all listening ports and identify the ones
> it knows by name.
> >
> >"Paul" <Jokbum170@hotmail.com> wrote in message
> >news:04a001c2d1e5$782a9dd0$3301280a@phx.gbl...
> >> I've installed a firewall (Agnitum Pro), and I've seen
> >> port scans in the log. I've also had a scan done and
> had
> >> a list generated of what each port is using.
> >> My question is twofold; how do I identify who is
> scanning
> >> me (can't just type the IP in the browser, doesn't
> >> work...), and how can I find out what exactly is using
> my
> >> ports (Any way to get a listing from Microsoft of
> >> recognized application filenames?)?
> >> Thanks
> >
> >
> >.
> >

Relevant Pages

  • Re: Active Ports
    ... > have 35 services listening on different ports and one established ... Well is Messenger supposed to have a connection? ... You may want to use Process Explorer to look at running processes ...
    (comp.security.firewalls)
  • Re: how do you display incoming and outgoing connections in windows?
    ... >> Active Ports, and netstat. ... incoming ftp connection. ... nothing was listed as listening. ...
    (comp.security.firewalls)
  • Re: Problems setting up Vonage VoIP with FreeBSD + ipfilter
    ... > So I got set up with Vonage VoIP, which I am really excited to have, but ... > So basically what I need to do is forward the following UDP ports to the ... and the Vonage-side of the connection is always port ...
    (freebsd-net)
  • Re: Starting iptables
    ... it is not clear that you need a firewall at all. ... just don't open any ports. ... "netstat -putl" will let you find out what listening ports are open. ... mysql is listening on tcp port 3306. ...
    (Debian-User)
  • Re: UPHClean log question
    ... A quick check to see which ports the computer is listening on is to run ... > Windows Firewall saying that the application svchost.exe has been blocked ... > extract from UPHClean might indicating a specific problem that should be ...
    (microsoft.public.windowsxp.help_and_support)