Suspicious ports open on 4500 switch

[laamidd2003]

For some reason, these ports are open on one of our 4500. We don't control the WAN here, and this switch is hooked to the router. Any ideas why these are open?

udp 0 0 *.2347

udp 0 0 *.2345

udp 0 0 *.2228

udp 0 0 *.49608

have this too:

sh netstat udp:

464674 no such ports

sh netstat tcp:

301 embryonic connections dropped

Thanks for any insight.

[Farrukh Haroon]

What modules do you have on this switch? Can you post output of 'show ip sockets'.

udp 0 0 *.49608 seems to be RTP ports. (VOIP)

Regards

Farrukh

[laamidd2003]

I don't have enable rights to the switch.

There isn't any VoIP at this office.

#sh ip sockets

Show ip commands:

------------------

show ip alias

show ip dns

show ip route

show ip http

sh ver

WS-C4506 Software, Version NmpSW: 7.6(6)

#sh mod

Mod Slot Ports Module-Type Model Sub Status

--- ---- ----- ------------------------- ------------------- --- --------

1 1 2 1000BaseX Supervisor WS-X4013 no ok

2 2 48 Inline Power Module WS-X4148-RJ45V no ok

3 3 48 Inline Power Module WS-X4148-RJ45V no ok

4 4 48 Inline Power Module WS-X4148-RJ45V no ok

Thanks,

Bob