OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: UDP Service Ports 1801 and 2301 are filling up the Firewall logs.
From: Zate Berg (zate.bergAU.PWCGLOBAL.COM)
Date: Fri May 12 2000 - 00:14:01 CDT

not sure if this answers your question.. but i do know Compaq Insight manager
(ver 4 on wards i think) uses 2301 to allow HTTP access to view the servers
status. ie http://dnsname:2301/ will allow you to view the Insight Agents and
associated server information.

I could be wrong but i think this is on TCP however..

hope this might help.

Z.

Larry Karantzios <lkarantziosONMONEY.COM> on 11/05/2000 04:27:23 AM

Please respond to Focus on Microsoft Mailing List <FOCUS-MSSECURITYFOCUS.COM>

To: FOCUS-MSSECURITYFOCUS.COM
cc:
Subject: UDP Service Ports 1801 and 2301 are filling up the Firewall logs.

While monitoring the Firewall logs I noticed that UDP service ports 1801
and 2301are being dropped by the firewall and they are about 40% of all log
information. I have the following questions:

1) What are these UDP ports used for?

       1801= ? 2301 = ?

2) Do the NT servers need these ports or can I ask my NT administrator to
disable them?

Thanks

Larry Karantzios

----------------------------------------------------------------
      The information transmitted is intended only for the person or entity to
      which it is addressed and may contain confidential and/or privileged
      material. Any review, retransmission, dissemination or other use of, or
      taking of any action in reliance upon, this information by persons or
      entities other than the intended recipient is prohibited. If you
      received this in error, please contact the sender and delete the material
      from any computer.