In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

learn more… | top users | synonyms

2
votes
1answer
667 views

Unknown Service Identification

How can one identify a service running on a non-standard port? I'm not talking about services like webserver or FTP since nmap can do that without any problems. I'm talking about services that are not ...
3
votes
2answers
446 views

How to practically detect current system net traffic?

I know that some viruses or trojans can install rootkits or bootkits to change system's normal behaviour; AFAIK for example filter queries for running processes or even hide active TCP ports. My ...
4
votes
2answers
1k views

How helpful is rkhunter?

I have a software firewall implemented on my server, and I have closed all unnecessary ports. I have strong passwords, and I validate user input on my website. With these things already in place, do ...
3
votes
2answers
1k views

Tools/methods helping to determine application/protocol serving specific port

I do blackbox testing of the server and figured out that there is a bunch of listening ports. I need to determine what services/protocols those ports are used for. What I've tried so far is to use ...
0
votes
3answers
489 views

Is it possible to “close” a port by dos'ing it?

If I see port 25 is open, but I dont have access to the program running the smtp server, could It be flooded with enough information to make it unusable (but not affect any other services)?
0
votes
1answer
504 views

What security concerns exist in running a glassfish app directly on port 443

I have installed Apache http server in front of glassfish based on recommendations i had in this question. I have been told that i will run into performance problems along with security issues. I was ...
2
votes
2answers
3k views

how to identify p2p on network

Im trying to work out if the traffic in the below image is P2P file sharing? If you notice the source ports are all random but the time 17.24 from c.port 58338 runs for a good length maybe about 400 ...
2
votes
2answers
2k views

SUN Remote Procedure Call Port 111 [closed]

I have found on my machine port 111 is open. This is listed as RPC. I understand there are possible attacks on this port. How can my machine be attacked if port 111 is open? How can I secure this ...
2
votes
1answer
804 views

Analyzing wireshark results (openvpn)

I signed up to Mullvad for VPN service, and manually run OpenVPN from my Linux box. I rebooted my computer and make sure not to start any OpenVPN service. Yet when I did a Wireshark analysis I am ...
3
votes
2answers
9k views

Does portforwarding present a risk to anonymity?

AirVPN by default has all ports closed but allows port-forwarding. I think this is required for P2P. Is this a threat to anonymity (e.g. would the person at the other end of the P2P transmission know ...
1
vote
3answers
816 views

Bibliography of attacks by port scanning techniques

I have to present a paper and make a presentation about the principal types of attacks by port scanning. What literature do you recommend to cover enough information about: types of attacks, port ...
4
votes
2answers
776 views

Detect what is running on an open port?

I have a wireless camera in my network. Running nmap on the camera, I discovered that the port 1010 is open but I could not find what it is used for. I looked in the administration pannel and did not ...
8
votes
2answers
2k views

ports blocked by firewall and not the server

I was asked this question at an interview and i wasn't sure about the answer. The question was "suppose you were checking the open ports on a particular webserver which was behind a firewall, how ...
21
votes
4answers
7k views

Dangers of opening up a wide range of ports? (mosh)

Why do we generally configure firewalls to filter out all traffic that we don't specifically allow? Is this just an extra layer of security for defense-in-depth that buys us nothing if we are not ...
1
vote
3answers
4k views

Why is system32/ntoskrnl.exe blocking port 80? [closed]

Today I've tried to start the Visual Studio Developer IIS as usual on Port 80, but this time it has quit with an error that port 80 is already in use. With netstat I've found out, that an application ...
0
votes
2answers
317 views

Unexplained downloading

I was just watching as my bandwidth monitor spiked downloading a file. I checked my current netstat and I didn't recognize one of the IPs so I started capturing the data with Wireshark. The ...
3
votes
1answer
982 views

How does OS detection work in practice?

I was wondering how OS detection really works on Nmap. I know it is about to send different tcp probes to see how the target machine responds to them. But what kind of probes would distinguish a ...
3
votes
3answers
3k views

Which of these ports are safe to leave open, which are not?

I just ran nMap against my IP address and got the following result: PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 23/tcp open telnet 80/tcp open http 443/tcp open https ...
4
votes
4answers
8k views

Router Ports open

What ports on my home router should be open, say if I'm only using it for browsing the internet. Right now these four are open, 23/tcp open telnet 53/tcp open domain 80/tcp open http ...
2
votes
3answers
182 views

Closed Port security

I have what I think is a security IT question (I'm more of a programmer myself). Assuming I am running a dedicated machine (say a PC) for a single program, meaning that the only port visible and open ...
8
votes
2answers
27k views

How do hackers take advantage of open ports as a vector for an attack?

It is widespread knowledge, and therefore a common practice, to close open ports on any machines connected to the internet. If for example, a typical program uses port xyz as it's communication ...
2
votes
1answer
3k views

Detected Port Scanning Attack in ESET Smart Security

I receive a number of notifications from ESET Smart Security about Port Scanning attack. But I'm behind a router. But as far as I know, computers behind a router is not accessible from others (Please ...
3
votes
1answer
3k views

Is opening both TCP/UDP less secured than just TCP or UDP when needed and why?

If application needs opened port X UDP, or X TCP combination. Is there any potential risk by opening both UDP/TCP as I usually am not sure which one the application uses?
10
votes
3answers
8k views

How to listen to all ports (UDP and TCP) or make them all appear open (linux)

I got an external Debian server. The problem is that my university campus doesn't allow connections to go outside when the port is different than TCP port 22, 80, 443, or UDP port 123. I tested them ...
1
vote
4answers
259 views

What configuration will allow another computer in the internet to probe my computer's ports?

I've just tested my computer with Gibson's port scan test: The test results stated that my system is "uncommon". It also said that my computer deliberately chose not to return. But I did not do any ...