From: "Gregg N" 

This is a multi-part message in MIME format.

------=_NextPart_000_002E_01C44349.EAEA3E30
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Netstat is in fact what I've been using to see what is open. The problem =
is that the owning process is often svchost, which hosts many services. =
Is there a way to find out which specific service hosted by svchost has = a
port open? Mabye some netsh incantation?

For example, how do I find out what Windows service listens on port = 1025?
This is registered as Internet Blackjack, of all things. So far, I = have
seen this only on XP computers, not 2000 ones. Netstat shows it is = owned
by svchost, but how do I find out which service within svchost?

Gregg

  "Rich"  wrote in message news:40b4dc20{at}w3.nls.net...
     Those could be randomly allocated RPC ports.  Use NETSTAT -ao to =
see the process that has these opened.  There are other tools that will =
identify RPC endpoints if they are RPC but these are in either developer =
or resource kits.

  Rich

    "Gregg N"  wrote in message =
news:40b4d543$1{at}w3.nls.net...
    Does anyone know where I can find a list of the network TCP and UDP =
ports
    that Windows XP opens either actively or passively (i.e., listening) =
in a
    default LAN installation?

    Also, IANA (http://www.iana.org/assignments/port-numbers) does not =
indicate
    what ports 1147 and 1148 are, but these appear to be active on one =
machine.

    Thanks.

    Gregg


------=_NextPart_000_002E_01C44349.EAEA3E30
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








Netstat is in fact what I've
been using =
to see what=20
is open. The problem is that the owning process is often svchost, which = hosts=20
many services. Is there a way to find out which specific service hosted = by=20
svchost has a port open? Mabye some netsh incantation?
 
For example, how do I find out what =
Windows service=20
listens on port 1025? This is = registered as=20
Internet Blackjack, of all things. So far, I have seen this only on XP=20
computers, not 2000 ones. Netstat shows it is owned by svchost, but how =
do I=20
find out which service within svchost?
 
Gregg
 

  "Rich" <{at}> wrote in message news:40b4dc20{at}w3.nls.net...
     Those
could be randomly =
allocated=20
  RPC ports.  Use NETSTAT -ao to see the process that has these=20
  opened.  There are other tools that will identify RPC endpoints =
if they=20
  are RPC but these are in either developer or resource =
kits.
   
  Rich
   
  
    "Gregg N" <greggn{at}invalid.invalid>">mailto:greggn{at}invalid.invalid">greggn{at}invalid.invalid>
= wrote in=20
    message news:40b4d543$1{at}w3.nls.net...Does=20
    anyone know where I can find a list of the network TCP and UDP =
portsthat=20
    Windows XP opens either actively or passively (i.e., listening) in=20
    adefault LAN installation?Also, IANA (http://www.iana.org" target="new">http://www.iana.org=">http://www.iana.org/assignments/port-numbers">http://www.iana.org=
/assignments/port-numbers)=20
    does not indicatewhat ports 1147 and 1148 are, but these appear =
to be=20
    active on one=20
machine.Thanks.Gregg

------=_NextPart_000_002E_01C44349.EAEA3E30--

--- BBBS/NT v4.01 Flag-5