nmap port 1022 1023 ?

nmap port 1022 1023 ?

Post by Juergen P. Mei » Thu, 16 Aug 2001 18:22:47




Quote:

>So, whats port 1022 1023 running..?

how should we know?

run lsof on the FreeBSD 4.0 host and find out.
or netstat -anp (if your netstat supports the -p option)

Juergen
--

 
 
 

nmap port 1022 1023 ?

Post by Norm » Thu, 16 Aug 2001 19:18:57







> FreeBSD 3.4-R running nmap against
> FreeBSD 4.0-R

> $ nmap -v 192.168.1.30


> www.insecure.org/nmap/)
> No tcp,udp, or ICMP scantype specified, assuming vanilla tcp connect()
> scan. Use -sP if you really don't want to portscan (and just want to
> see what hosts are up).
> Machine 192.168.1.30 MIGHT actually be listening on probe port 80
> Host  (192.168.1.30) appears to be up ... good.
> Initiating TCP connect() scan against  (192.168.1.30)
> Adding TCP port 2049 (state Open).
> Adding TCP port 21 (state Open).
> Adding TCP port 1022 (state Open).
> Adding TCP port 23 (state Open).
> Adding TCP port 80 (state Open).
> Adding TCP port 79 (state Open).
> Adding TCP port 8080 (state Open).
> Adding TCP port 110 (state Open).
> Adding TCP port 513 (state Open).
> Adding TCP port 111 (state Open).
> Adding TCP port 1023 (state Open).
> Adding TCP port 25 (state Open).
> The TCP connect scan took 8 seconds to scan 1509 ports.
> Interesting ports on  (192.168.1.30):
> Port    State       Protocol  Service
> 21      open        tcp       ftp
> 23      open        tcp       telnet
> 25      open        tcp       smtp
> 79      open        tcp       finger
> 80      open        tcp       http
> 110     open        tcp       pop-3
> 111     open        tcp       sunrpc
> 513     open        tcp       login
> 1022    open        tcp       unknown
> 1023    open        tcp       unknown
> 2049    open        tcp       nfs
> 8080    open        tcp       http-proxy

> Nmap run completed -- 1 IP address (1 host up) scanned in 8 seconds
> $

> So, whats port 1022 1023 running..?
> --

> http://members.nbci.com/jcenters/HADL.html

Typically it is for NFS which runs as a kernel modules, hence there
is usually not a process associated with it. It could be something
else though depending on how you have things setup. Since 2049 is
open, I would gather that you are running NFS.

I hope you are not connected to the Internet like that.

http://www.cert.org/tech_tips/win-UNIX-system_compromise.html

--
md5sum - Unix virus scanner.



 
 
 

nmap port 1022 1023 ?

Post by Bjorn Lindgre » Fri, 17 Aug 2001 03:39:58



> 1022    open        tcp       unknown                
> 1023    open        tcp       unknown                

> Nmap run completed -- 1 IP address (1 host up) scanned in 8 seconds
> $

> So, whats port 1022 1023 running..?

It can be anything. Use the tool 'lsof' to see what processes
who are binding the ports.

- bln

 
 
 

1. What uses ports 1022 and 1023?

Hello all

I just installed FreeBSD 4.0 (been using 3.1 for a while now) and I noticed
that ports 1022 and 1023 are open. A port scan says the following:

1022/tcp   open        unknown
1023/tcp   open        unknown

and I these ports do not appear in /etc/services.

Does anyone know what programs might be using these ports?

Thanks a lot.
-- Dan
________________________________________________________________________

 www.Dionysia.org/~dionysos/
 PGP Public Key: /~dionysos/pgp.html

2. How do I read a USB joystick?

3. ports 1022 and 1023

4. kppp and NO CARRIER: Help

5. HELP: Unknown process intermittently accessing port 1022 after printer removal

6. How to download libg++ under DOS???

7. DPT PM2144UW

8. reserved TCP ports above 1023?

9. Reading is much more interesting than TV (1022/1708)

10. head has a limit of 1022

11. Port scanning Solaris - nmap "filtered" ports and Nessus output

12. Lilo & cylinders > 1023