http://www.iana.org/assignments/port-numbers
 - Those fall inside 2 unassigned ranges here

http://www.sys-security.com/html/papers/trojan_list.html
 - They do not show up here at all

http://www.robertgraham.com/pubs/firewall-seen.html
 - Not here either

How did you find these ports?  Perhaps you can run inzider
(http://ntsecurity.nu/toolbox/inzider/) or FPortNG (available at
http://packetstorm.securify.com/NT/ or
http://www.foundstone.com/rdlabs/tools.php?category=Forensic) on this box
and see what shows up on those ports?  I haven't seen these ports in use
before, but I'd be interested in what FPortNG shows.

Randy Graham
-- 
You're kind of trying to pick between "horible disaster" and "attrocious
disaster"  -- Paul D. Robertson (on VNC vs. PPTP)

> -----Original Message-----
> From: Madhur Nanda [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, May 29, 2001 11:34 PM
> To: [EMAIL PROTECTED]
> Subject: tcp ports
> 
> 
> Hi all,
> 
> can someone give info on following ports on a NT system 1046 and 1128
> 
> TIA
> 
> Madhur
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 
> 
> 
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
  • tcp ports Madhur Nanda
    • Graham, Randy \(RAW\)

Reply via email to