Re: [PEN-TEST] Ports

[Mike Forrester <mikef () POCKETLINT COM>]

What OS are you running?  If it's a windows box, it could be a number of
things.  Most Windows 9x apps use a port above 1024 for all outbound
connections.  There are a few Windows NT/2000 services that do the same.
Start turning off services or closing apps one at a time and do a
netstat -an after each one.  You should be able to figure out which one it
is eventually.

Mike

> -----Original Message-----
> From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
> Of Matt
> Sent: Saturday, December 16, 2000 10:41 PM
> To: PEN-TEST () SECURITYFOCUS COM
> Subject: Ports
>
>
> I know there was a discussion on this list a while back about ports.
> Recently on two different machines I have noticed a wierd port 1025,
> open.  I cant think of any program that uses it.  I have checked the
> port database and it says network blackjack.  Any searching on network
> blackjack has come up as more lists of ports, and no information on what
> it is.  Does anyone here know what this is.
>
> Thanks
>
> Matt Carlson