Security Basics mailing list archives

Re: Port TCP/8000


From: "Richard H. Cotterell" <seec () mail retina ar>
Date: Sat, 2 Nov 2002 01:05:37 -0300


Why don't you go one step further and describe to the list how you are 
connected (in full).

From what you post, the answer looks to be normal run of the mill port 
activity.

Ref: Carl R Diliberto <cdiliberto () hotmail com>'s
     message dated 31 October 2002, 17:13 hours.

I got such great responses to my last questions, thanks to all those who
responded, I got brownie points with the boss! :o)

I have a newly built Dell PowerEdge Server and now have ports open I can't
explain clearly to government management.  .

Results of Netstat -an below:

Active Connections
     Proto  Local Address          Foreign Address        State
     TCP    0.0.0.0:111            0.0.0.0:0              LISTENING
     TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
     TCP    0.0.0.0:445            0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1025           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1026           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1032           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1041           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1044           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1045           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1046           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:1311           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:3372           0.0.0.0:0              LISTENING
     TCP    0.0.0.0:8000           0.0.0.0:0              LISTENING
     TCP    127.0.0.1:1043         0.0.0.0:0              LISTENING
     TCP    127.0.0.1:1043         127.0.0.1:1044         ESTABLISHED
     TCP    127.0.0.1:1044         127.0.0.1:1043         ESTABLISHED
     TCP    127.0.0.1:1045         127.0.0.1:1046         ESTABLISHED
     TCP    127.0.0.1:1046         127.0.0.1:1045         ESTABLISHED
     UDP    0.0.0.0:111            *:*
     UDP    0.0.0.0:135            *:*
     UDP    0.0.0.0:445            *:*
     UDP    0.0.0.0:1036           *:*
     UDP    0.0.0.0:1038           *:*
     UDP    0.0.0.0:2148           *:*

Any ideas?

Thanks
Carl



--
Richard H. Cotterell  <mailto:seec () mail retina ar>

Men blaspheme what they do not know.
  -Blaise Pascal, Pensees [1670]



Current thread: