Ports open on solaris/linux


 
Thread Tools Search this Thread
Special Forums Cybersecurity Ports open on solaris/linux
# 1  
Old 05-14-2009
Ports open on solaris/linux

Hi,

I am trying to close all possible ports on my solaris and linux servers.
I am stuck on the following ports on both Solaris 10 (local zone) and Linux (Suse) servers.
Here is nmap output :

PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
1720/tcp open H.323/Q.931
1863/tcp open unknown

PORT STATE SERVICE
22/tcp open ssh
1720/tcp open H.323/Q.931
1863/tcp open unknown

8080/tcp open http-proxy

As you can see in bold on both servers I got 1720/tcp and 1863/tcp ports (telnet as well shows that it is listening).

Do anybody knows what is listening on these ports ?
I try to keep only ssh and web ports.

(I tried lsof/netstat/fuser and stuff but no result with these ports).

Thanks.
# 2  
Old 05-14-2009
Don't quote me (and don't know if it'll help to much) but I think if I remember correctly it has port 1720 is some kind of VoIP, maybe that was on a Windows system.
~~~~~

OK had me thinking if I remembered correctly and I found the following information from http://www.voipvoice.com/faq.html (hope it's OK to post the link Smilie ) - it's the 3rd last question asked and might provide you with a little more information.

For H.323 (MS Netmeeting etc…)

* TCP port 1720 (H.225 call signalling for hosts)
* TCP ports 11000 to 65535 (H.245 capability exchange)
* UDP ports 16384 to 32767 RTP audio stream)

For H.323 (Callserve)

* UDP port 1719 (Callserve signalling)
* TCP port 1720 (Callserve signalling)
* UDP ports 5000 to 65535 (RTP audio stream)

Last edited by woofie; 05-14-2009 at 07:18 AM.. Reason: More information.
# 3  
Old 05-14-2009
On the Linux machine, check the output of
Code:
netstat -antp

The '-p' switch will show you which process is the owner of the port.
# 4  
Old 05-14-2009
solaris issue

Hi can anyone tell me what command should i use to find the files which have been created within 24hrs in / .


I tried with this

find mtime 24 /

But its not working. Pls let me know to solve the issue.
# 5  
Old 05-14-2009
Thanks for the answer.
I am dubious about solaris/linux having msn and h323 protocols out of the box :-)
I check netstat but nothing about this ports.
So still no clue about how to close this ports.
# 6  
Old 05-14-2009
Finally I got it !
The pb was not on the machine itself but a FW between my scanner and the host.
Too bad :-)
# 7  
Old 05-23-2009
just to mention, if you have a similar problem in the future, use lsof (in every linux standard repo, for aix available in the linux toolbox)

lsof -i TCP -l


for example
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Programming

c functions to turn off open ports in linux

nmap is a network utility which gives u information about open ports on ur system. for eg $ nmap 10.226.112.202 PORT STATE SERVICE 7/tcp open echo 13/tcp open daytime 22/tcp open ssh 23/tcp open telnet 37/tcp open time 1100/tcp open unknown these open... (2 Replies)
Discussion started by: anand121
2 Replies

2. Solaris

Open ports in solaris 10

hi guys, may i know the exact steps to open a port in solaris.i have some rough idea - which is adding the port number in /etc/services. but i am not sure the correct conventions, steps or any other steps. kindly advise.thanks guys ! (1 Reply)
Discussion started by: cromohawk
1 Replies

3. Shell Programming and Scripting

Sheel Scripting to lock 2 TCP unused ports in solaris and linux

My requirement is I need to write a program in shell scripting to check 2 TCP unused unique port numbers in SOLARIS and I have to lock the same ports so that it will not be used in any other new process and the same port numbers should be used and locked in the LINUX machine to communicate... (2 Replies)
Discussion started by: sreeramr30
2 Replies

4. Solaris

open ports solaris 8

Hello, I have a number of Solaris 8 Sun servers that have open ports that I cannot identify. I see some with 1013-1023 (which are reserved ports according to the IANA. Lsof does not identify these. I rebooted the server and they went off, but this morning I saw they were all back on again. Any... (1 Reply)
Discussion started by: csgonan
1 Replies

5. UNIX for Dummies Questions & Answers

open ports solaris 8

Hello, I have a number of Solaris 8 Sun servers that have open ports that I cannot identify. I see some with 1012-1020 (which are reserved ports according to the IANA. Lsof does not identify these. One server has all these on and one server just has 1017. *.1023 ... (3 Replies)
Discussion started by: csross
3 Replies

6. IP Networking

domain linux server, open ports?

Hi all - i currently run a domain strifex.net. This domain has a dedicated IP address and in having that, should be able to run a ventrilo VoIP server from it. I uploaded all the needed files etc... and am able to connect to it, if and only if i enable DMZ to my local machine - then i am able to... (1 Reply)
Discussion started by: ccfc1986
1 Replies

7. Solaris

How to check number of files is currenty open by Solaris 10 and Linux

Hi, Anyone know the command as how many files are open in Solaris 10 and Linux - i.e. currently open - real time Thanks (1 Reply)
Discussion started by: civic2005
1 Replies

8. AIX

Open Ports on System

Hi Every body, What is the command on AIX 5.2 that can be used to get all open ports? (2 Replies)
Discussion started by: aldowsary
2 Replies

9. Shell Programming and Scripting

Check open ports every ...

Hello, i need a script (bash type maybe?..), which would check open ports on 127.0.0.1 and then compare open ports with "registered/allowed" port list and try to kill the program who uses unregistered ports. It would be great that script would be started lets say every 5 or 10 minutes. You see i... (2 Replies)
Discussion started by: MorchiuS
2 Replies

10. Linux

How To Open Ports in RedHat ?

how can i open ports i need in red hat server vs root access ? (7 Replies)
Discussion started by: Sirius
7 Replies
Login or Register to Ask a Question