Topic 'netstat question' in forum 'Security' - dslreports.com

Re: netstat question

Sat, 26 Jan 2013 00:45:29 EDT

mysec posted :

said by OZO:

It's UDP (listening) port and as such, it's connectionless (comparing to TCP, which has two connection ends). UDP packet could be sent to any address. Thus, the "Foreign Address" is always unknown (in other words, it could be any), which is indicated here as *.*.

Thanks for that info!

----
rich

Re: netstat question

Sat, 26 Jan 2013 00:44:51 EDT

mysec posted :

said by HELLFIRE:

Did you include the command switch to check what executeable(s) it may be associated with?

If this is Windows, dollars to donuts this is the Windows Shares listener --

Yes it is. I don't have "shares" enabled.

The "exe" is Windows "System."

thanks,

----
rich

Re: netstat question

Sat, 26 Jan 2013 00:09:24 EDT

OZO posted : It's UDP (listening) port and as such, it's connectionless (comparing to TCP, which has two connection ends). UDP packet could be sent to any address. Thus, the "Foreign Address" is always unknown (in other words, it could be any), which is indicated here as *.*.
--
Keep it simple, it'll become complex by itself...

Re: netstat question

Fri, 25 Jan 2013 23:35:13 EDT

HELLFIRE posted : Did you include the command switch to check what executeable(s) it may be associated with?

If this is Windows, dollars to donuts this is the Windows Shares listener -- »en.wikipedia.org/wiki/List_of_TC···_numbers

Regards

netstat question

Fri, 25 Jan 2013 23:08:55 EDT

mysec posted : When querying "netstat -an" one of my UDP returns is:

UDP 0.0.0.0:445 *:*

where 0.0.0.0:445 is the local address:port

and *:* is the foreign address.

I've not been able to find out what *.* refers to.

thanks,

-rich