RE: Ports 1985 and 1986

["Jim Barrett" <jimb () ins com>]

Jeff,

Go to http://www.sysinternals.com and download the free TCPView utility.
Run it on the web server and it will list out all ports it detects.  In
most cases, it tells you what app has that port open.

Jim

Jim Barrett, MCSE, CISSA, CISSP, CCNP
Principal Consultant
International Network Services
Boston, MA

-----Original Message-----
From: Jeff Lane [mailto:crash () pinehurst net] 
Sent: Tuesday, May 20, 2003 5:55 PM
To: security-basics () securityfocus com
Subject: Ports 1985 and 1986

This afternoon I noticed a couple connections on a new server on ports 
1985 and 1986.  Anyone know what these ports are?

The machine is a win2k web server with Ensim installed, MS SQL Server 7,

and not much else.  It has all the latest updates from MS as well.

If anyone has any info, or needs more info from me, please let me know. 
    Unfortunately, I am a linux admin, not a windows admin, so I am not 
sure yet how to track down things like rogue processes, and which user 
is doing which, and what is bound to what port on a windows machine.

Thanks
Jeff


-- 
Jeffrey Lane
ConnectNC.com / Internet of the Sandhills
W4KDH () arrl net

chown -r us:us /yourbase/



------------------------------------------------------------------------
---
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check
Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register
Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
------------------------------------------------------------------------
----




---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------