LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 06-18-2014, 03:34 AM   #1
Pavan Kumar Reddy
LQ Newbie
 
Registered: Jun 2014
Location: India
Distribution: Linux
Posts: 6

Rep: Reputation: Disabled
Nmap_slow_comprehensive_scan show list of unknown udp ports


While doing nmap slow comprehensive scan to device a list of unkonw upd ports are shown as follow

Why would these UDP Ports be open?
Zenmap found these open.

17077/udp open|filtered unknown
17459/udp open|filtered unknown
19632/udp open|filtered unknown
19647/udp open|filtered unknown
21320/udp open|filtered unknown
21524/udp open|filtered unknown
22341/udp open|filtered unknown
36384/udp open|filtered unknown
38412/udp open|filtered unknown

Please can any one explain regarding the same.

Thanks
Pavan
 
Old 06-18-2014, 06:32 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,641

Rep: Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539
Hi,

You can run:
Code:
netstat -uanpl
to find what uses these ports

Regards
 
Old 06-18-2014, 07:01 AM   #3
Pavan Kumar Reddy
LQ Newbie
 
Registered: Jun 2014
Location: India
Distribution: Linux
Posts: 6

Original Poster
Rep: Reputation: Disabled
Hi bathory,

I can't find any above mentioned port through the command "netstat -anpul", but still they are showing under nmap slow scna.

Thanks
Pavan
 
Old 06-18-2014, 07:37 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,641

Rep: Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539
Quote:
Originally Posted by Pavan Kumar Reddy View Post
I can't find any above mentioned port through the command "netstat -anpul", but still they are showing under nmap slow scna.
You should run it as root, or else you won't get the process name
You can also use the lsof command (as root):
Code:
lsof|grep UDP

Last edited by bathory; 06-18-2014 at 07:39 AM.
 
Old 06-18-2014, 07:46 AM   #5
Pavan Kumar Reddy
LQ Newbie
 
Registered: Jun 2014
Location: India
Distribution: Linux
Posts: 6

Original Poster
Rep: Reputation: Disabled
Yes, I am running that command in root itself, and I have found that the ports which are shown in nmap scna are not listed in tc/udp ports, please find in the following link "http://en.wikipedia.org/wiki/List_of...P_port_numbers"
 
Old 06-18-2014, 08:02 AM   #6
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,641

Rep: Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539
Quote:
Originally Posted by Pavan Kumar Reddy View Post
Yes, I am running that command in root itself, and I have found that the ports which are shown in nmap scna are not listed in tc/udp ports, please find in the following link "http://en.wikipedia.org/wiki/List_of...P_port_numbers"
They are not listed, because they are not standard ports.
You can find the standard ports and their associated services in /etc/services.
 
Old 06-18-2014, 08:32 AM   #7
Pavan Kumar Reddy
LQ Newbie
 
Registered: Jun 2014
Location: India
Distribution: Linux
Posts: 6

Original Poster
Rep: Reputation: Disabled
Thanks bathory, just I want to confirm one thing, when ever I am doing nmap scan to my device IP, the scan o/p is showing list of of unknow ports as mentioned above, so is that a problem with my device or it is bug???
 
Old 06-18-2014, 08:47 AM   #8
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 11,641

Rep: Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539Reputation: 1539
Quote:
Originally Posted by Pavan Kumar Reddy View Post
Thanks bathory, just I want to confirm one thing, when ever I am doing nmap scan to my device IP, the scan o/p is showing list of of unknow ports as mentioned above, so is that a problem with my device or it is bug???
It's not a bug or a problem per se, but perhaps you should use the commands above, in order to investigate further what services are running on these ports.
 
Old 06-18-2014, 08:59 AM   #9
Pavan Kumar Reddy
LQ Newbie
 
Registered: Jun 2014
Location: India
Distribution: Linux
Posts: 6

Original Poster
Rep: Reputation: Disabled
Thanks a lot......
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] checking for open ports need ports 5198, 5199 open for UDP raypsi Linux - Security 9 05-22-2012 06:51 PM
UDP Ports open? Brian Murphy Linux - Networking 2 09-18-2011 05:03 PM
UDP ports Khalinsar Linux - Security 1 06-05-2005 12:51 PM
question about udp ports mcd Linux - Networking 3 03-15-2005 04:13 AM
Open UDP ports ArnaudVR Linux - Security 6 06-25-2003 10:43 AM


All times are GMT -5. The time now is 08:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration