OT - Open Ports on WinXP

[MoFunk]

Just for kicks I did a port scan on my garage system and found that port 1025 is open. My port scanner tells me that it is blackjack. I don't have blackjack! So I scanned my main rig and saw the same thing! Went to iana to see what port this is assigned to and it is in fact

blackjack 1025/tcp network blackjack

. Did a netstat and there is is again, port 1025 listening. So question is.....where the heck is this blackjack and how to get it to stop? No biggie, it has never tried to get through my firewall, but just curious.

 

[Wiz]

same here:

TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING

So what's up with that?

 

[FoBoT]

its normal for windows system, i forget the "real" use of it

let me see if i can find it

i think it might be inetd

here is a logical sounding explaination, i don't know if it is correct

Odds are, these are TCP connections initiated on your side to some other
server. When you initiate a TCP connection, you connect to some well
known port on the other side, but you must pick a port on your own side
that receives packets that come back within the TCP connection. Most
OS's use the convention that ports <1024 are "system ports" and ports
>=1024 are "user ports", and can be used for this purpose.


So if I were to connect to a remote HTTP server, I would grab a free
user port (a lot of code starts at 1024 and iterates up, one at a time,
to find a free port, so 1025 is a very likely candidate), listen on it,
and send a packet to the remote server like this:
Source IP: <myip> Source Port: <myuserport> Dest IP:
<remotewebserverIP> Dest Port: 80
And, of course, packets coming back from the web server would be
reversed, they would be destined for my user port.

not sure how you could test that

maybe shut down your pc, unplug from the internet (ethernet or modem)
start back up
check the ports before doing any http/internet stuff and see if its the same
maybe?