Windows Ports

[Jack Carlson]

Could someone explain the following to me?

Thanks!

Output of netstat -a
--------------------
Active Connections

Proto Local Address Foreign Address State
TCP home:epmap home:0 LISTENING
TCP home:microsoft-ds home:0 LISTENING
TCP home:1025 home:0 LISTENING
TCP home:1026 home:0 LISTENING
TCP home:1029 home:0 LISTENING
TCP home:1922 home:0 LISTENING
TCP home:microsoft-ds home:1922 ESTABLISHED
TCP home:1027 home:0 LISTENING
TCP home:1028 home:0 LISTENING
TCP home:1028 home:1029 ESTABLISHED
TCP home:1029 home:1028 ESTABLISHED
TCP home:1922 home:microsoft-ds ESTABLISHED
TCP home:netbios-ssn home:0 LISTENING
UDP home:microsoft-ds *:*
UDP home:netbios-ns *:*
UDP home:netbios-dgm *:*
UDP home:isakmp *:*

IANA Registered Port Numbers
----------------------------
blackjack 1025/tcp network blackjack
blackjack 1025/udp network blackjack
cap 1026/tcp Calender Access Protocol
cap 1026/udp Calender Access Protocol
exosee 1027/tcp ExoSee
exosee 1027/udp ExoSee
solid-mux 1029/tcp Solid Mux Server
solid-mux 1029/udp Solid Mux Server
vids-avtp 1853/tcp VIDS-AVTP
vids-avtp 1853/udp VIDS-AVTP
tapestry 1922/tcp Tapestry
tapestry 1922/udp Tapestry

 

[Pegasus \(MVP\)]

Explain what? Do you expect some patient respondent
to explain the purpose of each and every port?

 

[Jack Carlson]

Explain what? Do you expect some patient respondent
to explain the purpose of each and every port?

No. While I would be interested in learning about blackjack, exosee,
tapestry and solid mux services, AFAIK I'm not running any of them. What
I'd like to understand is how to determine why those ports are in use
and a clue as to why a port registered to one service is being made use
by another.

Does that help?

 

[neo [mvp outlook]]

In which case, you are asking about ephemeral (that is, short-lived) ports
that are allocated between the values of 1024 and 5000. If you want to know
what applications/services are using those short lived ports, then you can
give fport by foundstone (freeware) a try.

 

[Jack Carlson]

In which case, you are asking about ephemeral (that is, short-lived) ports
that are allocated between the values of 1024 and 5000. If you want to know
what applications/services are using those short lived ports, then you can
give fport by foundstone (freeware) a try.

Thanks for that reply, neo. You've answered my questions.

The fport utility does provides output more useful than that of netstat.
I also discovered tcpview from systernals that's similar, but the
console version, like most command-line programs written for Windows, is
somewhere between awkward and limited. Either way, these choices will
have to do for now.

Regards.