"unknown port", question

Andre andre.brassard at comcast.net
Sun Dec 5 17:36:39 EST 2004


I realize others have come across a similar situation.

I run Nessus (nmap) to scan a particular  PC that has Windows XP for 
open or 'listening' udp and tcp ports. I'm looking for high-numbered 
ports which could be used by rogue processes (trojans? etc). Sometimes 
the results come back as "unknown port", or unknown service(s). What to 
do? How does one further investigate exactly what IS running on those 
ports, if anything. I run  'netcat' and 'Fport' locally on the pc, and 
these reveal nothing. Does not even report those ports as running anything.



-- 
Andre Brassard (CISSP #54595 / CCNA)
Phone: 508 875 8581
email: andre.brassard at comcast.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.nessus.org/pipermail/nessus/attachments/20041205/7eab71f2/attachment.html 


More information about the Nessus mailing list