Discovered unidentified Port on MX200 (TC6.1.1)

[Ondrej Vereb]

Hi All,

During NMAP tests we discovered on MX200 (TC6.1.1) an unidentified port 857 UDP. Endpoint was in standby mode during the tests.

Did somebody know what does it stands for?

It's current list of opened ports with their description available somewhere on CCO?

Thanks and Regards

Ondrej

[sekuzmin]

Hi Ondrej,

I've just checked MX200 with software TC6.2 and do not see any process which might listen port 857/UDP.

I'd recommend you check endpoint to make sure that NMAP is telling truth. Log into endpoint using ssh and root credentials. The following command will show you if some process is listening to specific port:

      netstat -an | grep :857

and next command will show process name:

      lsof -nP | grep :857

For example:

     [mx200:~] $ netstat -an | grep :868

     udp        0      0 0.0.0.0:868             0.0.0.0:*

     [mx200:~] $ lsof | grep :868

     rpcbind   1541             root    7u     IPv4       3511        0t0        UDP *:868

Best regards,

Sergey Kuzmin