Security Incidents mailing list archives

Re: Port Zero


From: Ron <iago () valhallalegends com>
Date: Sun, 17 Jul 2005 13:05:12 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Looks to me like it's not set.  Because there's no active connection,
there's no foreign address.

A socket that's listening won't have a foreign address set, and a socket
that's connected will.

I noticed on Linux, it looks like this:
iago@darkside:~$ netstat -a | grep LISTEN
tcp        0      0 *:8001          *:*                LISTEN
tcp        0      0 *:3306          *:*                LISTEN
tcp        0      0 *:http          *:*                LISTEN
tcp        0      0 *:ssh           *:*                LISTEN
tcp        0      0 *:https         *:*                LISTEN

Probably 0.0.0.0:0 is just Windows's way of saying "not set"?

omibaba () gmail com wrote:
Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1025           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1028           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1054           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1307           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1344           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1445           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1447           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1452           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1453           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1455           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1460           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1465           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1466           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1469           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1491           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1496           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1498           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1507           0.0.0.0:0              LISTENING

Above is the output of netstat -an |more

Guys / Gals Do you know what means port zero in Windoze Platform ? I know the answer but jst wanted to know anyone 
has a better explaination.

In Unix Family port zero is used for socket programming but not the same in Windoze family.

I have asked this question in many programs of mine in CEH - Certfied Ethical Hacking but still awaiting for answers. 
Lemme see if can get some answers for this post!!!!

Ciao

Baba
CEO
Appsec


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.9.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC2p3XfqSf2EkP4p4RAky6AJ4uVgpt37oxTENJ3wjd9luWH8Jb/wCeOqO5
Sy6WrEhqEVR5SuOAQiQDgOM=
=5KEZ
-----END PGP SIGNATURE-----


Current thread: