UDP probes. Is this normal?

T

Todd

Hi All,

A customer asked me to do some pen testing on her
network(s). I caught this when I probed one computers
UDP ports:


Target OS is XP-pro-sp3
#nmap -sU -v 192.168.200.100

Nmap scan report for 192.168.200.100
Host is up (0.080s latency).
Not shown: 994 closed ports
PORT STATE SERVICE
123/udp open ntp
500/udp open|filtered isakmp
902/udp open|filtered ideafarm-door
1900/udp open|filtered upnp
4500/udp open|filtered nat-t-ike
49503/udp open|filtered unknown


Why would XP be host a network time protocol
server (NTP)? Not to mention the rest of that
crap!

Is this normal, or do you smell a rat? Any comments?

Many thanks,
-T
 
D

David H. Lipman

From: "Todd said:
Hi All,

A customer asked me to do some pen testing on her
network(s). I caught this when I probed one computers
UDP ports:


Target OS is XP-pro-sp3
#nmap -sU -v 192.168.200.100

Nmap scan report for 192.168.200.100
Host is up (0.080s latency).
Not shown: 994 closed ports
PORT STATE SERVICE
123/udp open ntp
500/udp open|filtered isakmp
902/udp open|filtered ideafarm-door
1900/udp open|filtered upnp
4500/udp open|filtered nat-t-ike
49503/udp open|filtered unknown


Why would XP be host a network time protocol
server (NTP)? Not to mention the rest of that
crap!

Is this normal, or do you smell a rat? Any comments?

Many thanks,
-T

XP doesn't host NTP. XP uses NTP to sync to a time server such as from the NIST.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top