RE: Ports 1985 and 1986

["Christopher Harrington" <charrington () syseng com>]

Jeff,

I would download a copy of Fport from Foundstone. It will tell you what
application is bound to what port.

http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcon
tent=/resources/proddesc/fport.htm


--Chris


-----Original Message-----
From: Jeff Lane [mailto:crash () pinehurst net]
Sent: Tuesday, May 20, 2003 5:55 PM
To: security-basics () securityfocus com
Subject: Ports 1985 and 1986


This afternoon I noticed a couple connections on a new server on ports
1985 and 1986.  Anyone know what these ports are?

The machine is a win2k web server with Ensim installed, MS SQL Server 7,
and not much else.  It has all the latest updates from MS as well.

If anyone has any info, or needs more info from me, please let me know.
    Unfortunately, I am a linux admin, not a windows admin, so I am not
sure yet how to track down things like rogue processes, and which user
is doing which, and what is bound to what port on a windows machine.

Thanks
Jeff


--
Jeffrey Lane
ConnectNC.com / Internet of the Sandhills
W4KDH () arrl net

chown -r us:us /yourbase/



--------------------------------------------------------------------------
-
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point,
Hacking & Assessment, Cisco Security, Wireless Security & more! Register
Now! --UP TO 30% off classes in select cities--
http://www.securityfocus.com/Vigilar-security-basics
--------------------------------------------------------------------------
--

Attachment: smime.p7s
Description: