Security Incidents mailing list archives
Re: Port Zero
From: Ron <iago () valhallalegends com>
Date: Sun, 17 Jul 2005 13:05:12 -0500
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Looks to me like it's not set. Because there's no active connection, there's no foreign address. A socket that's listening won't have a foreign address set, and a socket that's connected will. I noticed on Linux, it looks like this: iago@darkside:~$ netstat -a | grep LISTEN tcp 0 0 *:8001 *:* LISTEN tcp 0 0 *:3306 *:* LISTEN tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN tcp 0 0 *:https *:* LISTEN Probably 0.0.0.0:0 is just Windows's way of saying "not set"? omibaba () gmail com wrote:
Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING TCP 0.0.0.0:1028 0.0.0.0:0 LISTENING TCP 0.0.0.0:1054 0.0.0.0:0 LISTENING TCP 0.0.0.0:1307 0.0.0.0:0 LISTENING TCP 0.0.0.0:1344 0.0.0.0:0 LISTENING TCP 0.0.0.0:1445 0.0.0.0:0 LISTENING TCP 0.0.0.0:1447 0.0.0.0:0 LISTENING TCP 0.0.0.0:1452 0.0.0.0:0 LISTENING TCP 0.0.0.0:1453 0.0.0.0:0 LISTENING TCP 0.0.0.0:1455 0.0.0.0:0 LISTENING TCP 0.0.0.0:1460 0.0.0.0:0 LISTENING TCP 0.0.0.0:1465 0.0.0.0:0 LISTENING TCP 0.0.0.0:1466 0.0.0.0:0 LISTENING TCP 0.0.0.0:1469 0.0.0.0:0 LISTENING TCP 0.0.0.0:1491 0.0.0.0:0 LISTENING TCP 0.0.0.0:1496 0.0.0.0:0 LISTENING TCP 0.0.0.0:1498 0.0.0.0:0 LISTENING TCP 0.0.0.0:1507 0.0.0.0:0 LISTENING Above is the output of netstat -an |more Guys / Gals Do you know what means port zero in Windoze Platform ? I know the answer but jst wanted to know anyone has a better explaination. In Unix Family port zero is used for socket programming but not the same in Windoze family. I have asked this question in many programs of mine in CEH - Certfied Ethical Hacking but still awaiting for answers. Lemme see if can get some answers for this post!!!! Ciao Baba CEO Appsec
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.9.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC2p3XfqSf2EkP4p4RAky6AJ4uVgpt37oxTENJ3wjd9luWH8Jb/wCeOqO5 Sy6WrEhqEVR5SuOAQiQDgOM= =5KEZ -----END PGP SIGNATURE-----
Current thread:
- Port Zero omibaba (Jul 17)
- Re: Port Zero STRAMBO (Jul 17)
- Re: Port Zero Ron (Jul 17)
- Re: Port Zero Lee Dilkie (Jul 18)
- mysql attack Pall Thayer (Jul 19)
- Re: mysql attack Joel Esler (Jul 19)
- Re: mysql attack W. Guhan Iyer (Jul 19)
- Re: mysql attack Pall Thayer (Jul 21)
- Re: Port Zero Lee Dilkie (Jul 18)
- <Possible follow-ups>
- Re: Port Zero windows (Jul 17)
- RE: Port Zero Jim Harrison (ISA) (Jul 18)
- Re: Port Zero nony101 (Jul 19)