Finding out what Ports are open
To find out what ports are open/exposed do the following
Start >Run >type "cmd" {enter}
At the command line type "netstat -a" {enter}
The list displayed shows "Listening ports" and established "Who is on the other end" connections to your computer.
WARNING: This is a list of common Trojan/Backdoor Port numbers
http://www.sans.org/resources/idfaq/oddports.phpWho is listening? Use this syntax: netstat -an |find /i "listening"
Save who is listening to a text file: netstat -an |find /i "listening" > c:\openports.txt
Who is established? Use this syntax: netstat -an |find /i "established"
Note: In Windows XP, you can type NETSTAT -O to get a list of all the owning process ID associated with each connection: netstat -ao |find /i "listening"
*****Pulist*****
You can use PULIST from the W2K Resource Kit to find the PID and see what process uses it and who started it. For example, you found out that your computer had an open connection to a remote IP address on TCP port 80, and you don't have any Internet Explorer or other browser windows open. You want to find out what process is using that session.
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/pulist-o.asp*****Links*****
Port Assignments for Commonly-Used Services
http://www.microsoft.com/windows2000/techinfo/reskit/samplechapters/cnfc/cnfc_por_simw.aspTCP/UDP Ports Used By Exchange 2000 Server
http://support.microsoft.com/default.aspx?scid=kb;en-us;278339Nice shiny Port List :0)
http://hackerwhacker.com/portslist.htmlhttp://www.incubus.co.uk/os/windows/netstat.htmhttp://www.petri.co.il/quickly_find_local_open_ports.htm*****Portscan Software*****
Run Fport from Foundstone:
http://www.foundstone.com/resources/proddesc/fport.htmIt will tell you what .EXE has the ports open. You can take appropriate actions
Monitor what port is doing what with Active Ports.
http://www.protect-me.com/freeware.htmlScan Yourself (Free)
Scan your Ports with Port Detective: lets you scan your PC ports to see which are open, in use, or blocked
http://www.portdetective.com/Scan Remote Computers (Free)
Advanced port scanner is a small, fast, robust and easy-to use port scanner for Win32 platform. (You can use it for FREE).
http://www.antivirus.com.au/radmin/famatech_nu/portscanner.htmAngry IP scanner is a very fast IP scanner for Windows. It can scan IPs in any range.
http://www.angryziber.com/ipscan/
