[unisog] 5679/tcp on Windows XP?

Goverts IV, Paul pgoverts at sjfc.edu
Wed Oct 2 00:23:06 GMT 2002


"netstat -ao" in XP will give you the Process ID's of any open connections,
which you can then compare against the PID's listed in task manager.	

Hope it helps!

Paul

-----Original Message-----
From: Allen Chang [mailto:allen at rescomp.berkeley.edu] 
Sent: Tuesday, October 01, 2002 12:54 AM
To: unisog at sans.org
Subject: [unisog] 5679/tcp on Windows XP?

Hi,

I'm wondering if anyone has seen 5679/tcp open on Windows XP computers?
I'm suspecting Nautic
<http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.nautic.htm
l>
but I haven't been able to confirm it in the field. Google doesn't turn up
much except Remote Replication Agent Connection, so I'm a little
concerned.

Any suggestions on finding out what program is opening that port? I've
used Vision by Foundstone on Win2k computers but I'm not sure what to use
for WinXP

@llen




More information about the unisog mailing list