RE: Port TCP/8000

["Floura, Ranvir (NIH/CIT)" <rfloura () mail nih gov>]

The best thing you could do is go to http://www.foundstone.com and download
the tool "fport" and run it.  It is a dos based program which will tell you
the "PID number, Process ID, Port numbers, protocol type and the associated
path of the applications that are currently running on your machine.  

-RSF

-----Original Message-----
From: Carl R Diliberto [mailto:cdiliberto () hotmail com]
Sent: Thursday, October 31, 2002 5:13 PM
To: security-basics
Subject: Port TCP/8000


I got such great responses to my last questions, thanks to all those who
responded, I got brownie points with the boss! :o)

I have a newly built Dell PowerEdge Server and now have ports open I can't
explain clearly to government management.  .

Results of Netstat -an below:

Active Connections
      Proto  Local Address          Foreign Address        State
      TCP    0.0.0.0:111            0.0.0.0:0              LISTENING
      TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
      TCP    0.0.0.0:445            0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1025           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1026           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1032           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1041           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1044           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1045           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1046           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:1311           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:3372           0.0.0.0:0              LISTENING
      TCP    0.0.0.0:8000           0.0.0.0:0              LISTENING
      TCP    127.0.0.1:1043         0.0.0.0:0              LISTENING
      TCP    127.0.0.1:1043         127.0.0.1:1044         ESTABLISHED
      TCP    127.0.0.1:1044         127.0.0.1:1043         ESTABLISHED
      TCP    127.0.0.1:1045         127.0.0.1:1046         ESTABLISHED
      TCP    127.0.0.1:1046         127.0.0.1:1045         ESTABLISHED
      UDP    0.0.0.0:111            *:*
      UDP    0.0.0.0:135            *:*
      UDP    0.0.0.0:445            *:*
      UDP    0.0.0.0:1036           *:*
      UDP    0.0.0.0:1038           *:*
      UDP    0.0.0.0:2148           *:*

 Any ideas?

Thanks
Carl