filtered ports, Netbus & Unknown
|
|
 May 13 2005, 05:26 PM, updated 21y ago
Show posts by this member only | Post
#1
|
 
Moderator
6,181 posts Joined: Oct 2004   
|
nmap gave me this..
707/tcp filtered unknown 1023/tcp open unknown 1072/tcp filtered unknown 5554/tcp filtered unknown 9996/tcp filtered unknown 12345/tcp filtered NetBus 12346/tcp filtered NetBus 20034/tcp filtered unknown 31337/tcp filtered Elite netstat -lnp doesn't show me any process is listening on those ports. what's happening to this poor box?  |
|
|
|
|
|
May 13 2005, 05:59 PM
Show posts by this member only | Post
#2
|
 
VIP
6,008 posts Joined: Jan 2003
|
'filtered' means there isn't a response received from that port (for example if a firewall drops the packet).
|
|
|
May 13 2005, 06:05 PM
Show posts by this member only | Post
#3
|
|
Moderator
6,181 posts Joined: Oct 2004
|
Oh, thanks. But I'm just wondering how did that 12345 thing comes out.
|
|
|
May 13 2005, 06:05 PM
Show posts by this member only | Post
#4
|
Elite
1,235 posts Joined: Jan 2003 From: kuala lipis
|
somewhere somehow packets destined for the hosts are dropped. could be because of a firewall silently dropping them or TTL expiration. this behaviour is mostly tcp-only.
it's perfectly normal. |
|
|
May 13 2005, 07:46 PM
Show posts by this member only | Post
#5
|
|
Moderator
6,181 posts Joined: Oct 2004
|
is it possible that 12345 is actually some other service but it is a wrong interpretation from nmap to be netbus?
|
|
|
May 13 2005, 08:39 PM
Show posts by this member only | Post
#6
|
|
VIP
6,008 posts Joined: Jan 2003
|
/usr/share/nmap/nmap-services
|
|
|
May 14 2005, 12:53 PM
Show posts by this member only | Post
#7
|
|
Moderator
6,181 posts Joined: Oct 2004
|
oh. thanks dude.
actually those are the ports found in www.jpj.gov.my just curious why is it there. |
|
Topic ClosedOptions
|
| Change to: |  0.0186sec
 1.40
 5 queries
 GZIP Disabled
Time is now: 24th December 2025 - 10:58 PM |
Quote