找回密码
 立即注册

QQ登录

只需一步,快速开始

扫一扫,访问微社区

查看: 491|回复: 4

[转贴]:IP 端口对照表

[复制链接]

已领礼包: 593个

财富等级: 财运亨通

发表于 2004-5-3 00:01:21 | 显示全部楼层 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有账号?立即注册

×
http://www.taihe.net/bbs/dispbbs ... ID=2462&ID=2462

IP端口对照表

0 通常用于分析操作系统。这一方法能够工作是因为在一些系统中“0”是无效端口,当你试图使用一种通常的闭合端口连接它时将产生不同的结果。一种典型的扫描:使用IP地址为0.0.0.0,设置ACK位并在以太网层广播。
1 tcpmux 这显示有人在寻找SGI Irix机器。Irix是实现tcpmux的主要提供者,缺省情况下tcpmux在这种系统中被打开。Iris机器在发布时含有几个缺省的无密码的帐户,如lp, guest, uucp, nuucp, demos, tutor, diag, EZsetup, OutOfBox, 和4Dgifts。许多管理员安装后忘记删除这些帐户。因此Hacker们在Internet上搜索tcpmux并利用这些帐户。
7 Echo 你能看到许多人们搜索Fraggle放大器时,发送到x.x.x.0和x.x.x.255的信息。常见的一种DoS攻击是echo循环(echo-loop),攻击者伪造从一个机器发送到另一个机器的UDP数据包,而两个机器分别以它们最快的方式回应这些数据包。(参见Chargen)另一种东西是由DoubleClick在词端口建立的TCP连接。有一种产品叫做“Resonate Global Dispatch”,它与DNS的这一端口连接以确定最近的路由。Harvest/squid cache将从3130端口发送UDP echo:“如果将cache的source_ping on选项打开,它将对原始主机的UDP echo端口回应一个HIT reply。”这将会产生许多这类数据包。

11 sysstat 这是一种UNIX服务,它会列出机器上所有正在运行的进程以及是什么启动了这些进程。这为入侵者提供了许多信息而威胁机器的安全,如暴露已知某些弱点或帐户的程序。这与UNIX系统中“ps”命令的结果相似

再说一遍:ICMP没有端口,ICMP port 11通常是ICMP type=11

19 chargen 这是一种仅仅发送字符的服务。UDP版本将会在收到UDP包后回应含有垃圾字符的包。TCP连接时,会发送含有垃圾字符的数据流知道连接关闭。Hacker利用IP欺骗可以发动DoS攻击。伪造两个chargen服务器之间的UDP包。由于服务器企图回应两个服务器之间的无限的往返数据通讯一个chargen和echo将导致服务器过载。同样fraggle DoS攻击向目标地址的这个端口广播一个带有伪造受害者IP的数据包,受害者为了回应这些数据而过载。

21 ftp 最常见的攻击者用于寻找打开“anonymous”的ftp服务器的方法。这些服务器带有可读写的目录。Hackers或Crackers 利用这些服务器作为传送warez (私有程序) 和pr0n(故意拼错词而避免被搜索引擎分类)的节点。

22 ssh PcAnywhere建立TCP和这一端口的连接可能是为了寻找ssh。这一服务有许多弱点。如果配置成特定的模式,许多使用RSAREF库的版本有不少漏洞。(建议在其它端口运行ssh)

还应该注意的是ssh工具包带有一个称为make-ssh-known-hosts的程序。它会扫描整个域的ssh主机。你有时会被使用这一程序的人无意中扫描到。

UDP(而不是TCP)与另一端的5632端口相连意味着存在搜索pcAnywhere的扫描。5632(十六进制的0x1600)位交换后是0x0016(使进制的22)。

23 Telnet 入侵者在搜索远程登陆UNIX的服务。大多数情况下入侵者扫描这一端口是为了找到机器运行的操作系统。此外使用其它技术,入侵者会找到密码。

25 smtp 攻击者(spammer)寻找SMTP服务器是为了传递他们的spam。入侵者的帐户总被关闭,他们需要拨号连接到高带宽的e-mail服务器上,将简单的信息传递到不同的地址。SMTP服务器(尤其是sendmail)是进入系统的最常用方法之一,因为它们必须完整的暴露于Internet且邮件的路由是复杂的(暴露+复杂=弱点)。

53 DNS Hacker或crackers可能是试图进行区域传递(TCP),欺骗DNS(UDP)或隐藏其它通讯。因此防火墙常常过滤或记录53端口。

需要注意的是你常会看到53端口做为UDP源端口。不稳定的防火墙通常允许这种通讯并假设这是对DNS查询的回复。Hacker常使用这种方法穿透防火墙。

67和68 Bootp和DHCP UDP上的Bootp/DHCP:通过DSL和cable-modem的防火墙常会看见大量发送到广播地址255.255.255.255的数据。这些机器在向DHCP服务器请求一个地址分配。Hacker常进入它们分配一个地址把自己作为局部路由器而发起大量的“中间人”(man-in-middle)攻击。客户端向68端口(bootps)广播请求配置,服务器向67端口(bootpc)广播回应请求。这种回应使用广播是因为客户端还不知道可以发送的IP地址。

69 TFTP(UDP) 许多服务器与bootp一起提供这项服务,便于从系统下载启动代码。但是它们常常错误配置而从系统提供任何文件,如密码文件。它们也可用于向系统写入文件。

79 finger Hacker用于获得用户信息,查询操作系统,探测已知的缓冲区溢出错误,回应从自己机器到其它机器finger扫描。

98 linuxconf 这个程序提供linux boxen的简单管理。通过整合的HTTP服务器在98端口提供基于Web界面的服务。它已发现有许多安全问题。一些版本setuid root,信任局域网,在/tmp下建立Internet可访问的文件,LANG环境变量有缓冲区溢出。此外因为它包含整合的服务器,许多典型的HTTP漏洞可能存在(缓冲区溢出,历遍目录等)

109 POP2 并不象POP3那样有名,但许多服务器同时提供两种服务(向后兼容)。在同一个服务器上POP3的漏洞在POP2中同样存在。

110 POP3 用于客户端访问服务器端的邮件服务。POP3服务有许多公认的弱点。关于用户名和密码交换缓冲区溢出的弱点至少有20个(这意味着Hacker可以在真正登陆前进入系统)。成功登陆后还有其它缓冲区溢出错误。

111 sunrpc portmap rpcbind Sun RPC PortMapper/RPCBIND。访问portmapper是扫描系统查看允许哪些RPC服务的最早的一步。常见RPC服务有:rpc.mountd, NFS, rpc.statd, rpc.csmd, rpc.ttybd, amd等。入侵者发现了允许的RPC服务将转向提供服务的特定端口测试漏洞。

记住一定要记录线路中的daemon, IDS, 或sniffer,你可以发现入侵者正使用什么程序访问以便发现到底发生了什么。

113 Ident auth 这是一个许多机器上运行的协议,用于鉴别TCP连接的用户。使用标准的这种服务可以获得许多机器的信息(会被Hacker利用)。但是它可作为许多服务的记录器,尤其是FTP, POP, IMAP, SMTP和IRC等服务。通常如果有许多客户通过防火墙访问这些服务,你将会看到许多这个端口的连接请求。记住,如果你阻断这个端口客户端会感觉到在防火墙另一边与e-mail服务器的缓慢连接。许多防火墙支持在TCP连接的阻断过程中发回RST,着将回停止这一缓慢的连接。

119 NNTP news 新闻组传输协议,承载USENET通讯。当你链接到诸如:news://comp.security.firewalls/. 的地址时通常使用这个端口。这个端口的连接企图通常是人们在寻找USENET服务器。多数ISP限制只有他们的客户才能访问他们的新闻组服务器。打开新闻组服务器将允许发/读任何人的帖子,访问被限制的新闻组服务器,匿名发帖或发送spam。

135 oc-serv MS RPC end-point mapper Microsoft在这个端口运行DCE RPC end-point mapper为它的DCOM服务。这与UNIX 111端口的功能很相似。使用DCOM和/或RPC的服务利用机器上的end-point mapper注册它们的位置。远端客户连接到机器时,它们查询end-point mapper找到服务的位置。同样Hacker扫描机器的这个端口是为了找到诸如:这个机器上运行Exchange Server吗?是什么版本?

这个端口除了被用来查询服务(如使用epdump)还可以被用于直接攻击。有一些DoS攻击直接针对这个端口。

137 NetBIOS name service nbtstat (UDP) 这是防火墙管理员最常见的信息,请仔细阅读文章后面的NetBIOS一节

139 NetBIOS
File and Print Sharing 通过这个端口进入的连接试图获得NetBIOS/SMB服务。这个协议被用于Windows“文件和打印机共享”和SAMBA。在Internet上共享自己的硬盘是可能是最常见的问题。

大量针对这一端口始于1999,后来逐渐变少。2000年又有回升。一些VBS(IE5 VisualBasic s cripting)开始将它们自己拷贝到这个端口,试图在这个端口繁殖。

143 IMAP 和上面POP3的安全问题一样,许多IMAP服务器有缓冲区溢出漏洞运行登陆过程中进入。记住:一种Linux蠕虫(admw0rm)会通过这个端口繁殖,因此许多这个端口的扫描来自不知情的已被感染的用户。当RadHat在他们的Linux发布版本中默认允许IMAP后,这些漏洞变得流行起来。Morris蠕虫以后这还是第一次广泛传播的蠕虫。

这一端口还被用于IMAP2,但并不流行。

已有一些报道发现有些0到143端口的攻击源于脚本。

161 SNMP(UDP) 入侵者常探测的端口。SNMP允许远程管理设备。所有配置和运行信息都储存在数据库中,通过SNMP客获得这些信息。许多管理员错误配置将它们暴露于Internet。Crackers将试图使用缺省的密码“public”“private”访问系统。他们可能会试验所有可能的组合。

SNMP包可能会被错误的指向你的网络。Windows机器常会因为错误配置将HP JetDirect remote management软件使用SNMP。HP OBJECT IDENTIFIER将收到SNMP包。新版的Win98使用SNMP解析域名,你会看见这种包在子网内广播(cable modem, DSL)查询sysName和其它信息。

162 SNMP trap 可能是由于错误配置

177 xdmcp 许多Hacker通过它访问X-Windows控制台, 它同时需要打开6000端口。

513 rwho 可能是从使用cable modem或DSL登陆到的子网中的UNIX机器发出的广播。这些人为Hacker进入他们的系统提供了很有趣的信息。

553 CORBA
IIOP (UDP) 如果你使用cable modem或DSL VLAN,你将会看到这个端口的广播。CORBA是一种面向对象的RPC(remote procedure call)系统。Hacker会利用这些信息进入系统。

600 Pcserver backdoor 请查看1524端口

一些玩s cript的孩子认为他们通过修改ingreslock和pcserver文件已经完全攻破了系统-- Alan J. Rosenthal.

635 mountd Linux的mountd Bug。这是人们扫描的一个流行的Bug。大多数对这个端口的扫描是基于UDP的,但基于TCP的mountd有所增加(mountd同时运行于两个端口)。记住,mountd可运行于任何端口(到底在哪个端口,需要在端口111做portmap查询),只是Linux默认为635端口,就象NFS通常运行于2049端口。

1024 许多人问这个端口是干什么的。它是动态端口的开始。许多程序并不在乎用哪个端口连接网络,它们请求操作系统为它们分配“下一个闲置端口”。基于这一点分配从端口1024开始。这意味着第一个向系统请求分配动态端口的程序将被分配端口1024。为了验证这一点,你可以重启机器,打开Telnet,再打开一个窗口运行“natstat -a”,你将会看到Telnet被分配1024端口。请求的程序越多,动态端口也越多。操作系统分配的端口将逐渐变大。再来一遍,当你浏览Web页时用“netstat”查看,每个Web页需要一个新端口。

1025 参见1024

1026 参见1024

1080 SOCKS
这一协议以管道方式穿过防火墙,允许防火墙后面的许多人通过一个IP地址访问Internet。理论上它应该只允许内部的通信向外达到Internet。但是由于错误的配置,它会允许Hacker/Cracker的位于防火墙外部的攻击穿过防火墙。或者简单地回应位于Internet上的计算机,从而掩饰他们对你的直接攻击。WinGate是一种常见的Windows个人防火墙,常会发生上述的错误配置。在加入IRC聊天室时常会看到这种情况。

1114 SQL
系统本身很少扫描这个端口,但常常是sscan脚本的一部分。

1243 Sub-7木马(TCP)


1524 ingreslock后门
许多攻击脚本将安装一个后门Shell于这个端口(尤其是那些针对Sun系统中Sendmail和RPC服务漏洞的脚本,如statd, ttdbserver和cmsd)。如果你刚刚安装了你的防火墙就看到在这个端口上的连接企图,很可能是上述原因。你可以试试Telnet到你的机器上的这个端口,看看它是否会给你一个Shell。连接到600/pcserver也存在这个问题。

2049 NFS
NFS程序常运行于这个端口。通常需要访问portmapper查询这个服务运行于哪个端口,但是大部分情况是安装后NFS运行于这个端口,Hacker/Cracker因而可以闭开portmapper直接测试这个端口。

3128 squid
这是Squid HTTP代理服务器的默认端口。攻击者扫描这个端口是为了搜寻一个代理服务器而匿名访问Internet。你也会看到搜索其它代理服务器的端口:8000/8001/8080/8888。扫描这一端口的另一原因是:用户正在进入聊天室。其它用户(或服务器本身)也会检验这个端口以确定用户的机器是否支持代理。请查看5.3节。

5632 pcAnywere
你会看到很多这个端口的扫描,这依赖于你所在的位置。当用户打开pcAnywere时,它会自动扫描局域网C类网以寻找可能得代理(译者:指agent而不是proxy)。Hacker/cracker也会寻找开放这种服务的机器,所以应该查看这种扫描的源地址。一些搜寻pcAnywere的扫描常包含端口22的UDP数据包。参见拨号扫描。

6776 Sub-7 artifact
这个端口是从Sub-7主端口分离出来的用于传送数据的端口。例如当控制者通过电话线控制另一台机器,而被控机器挂断时你将会看到这种情况。因此当另一人以此IP拨入时,他们将会看到持续的,在这个端口的连接企图。(译者:即看到防火墙报告这一端口的连接企图时,并不表示你已被Sub-7控制。)

6970 RealAudio
RealAudio客户将从服务器的6970-7170的UDP端口接收音频数据流。这是由TCP7070端口外向控制连接设置的。

13223 PowWow
PowWow 是Tribal Voice的聊天程序。它允许用户在此端口打开私人聊天的连接。这一程序对于建立连接非常具有“进攻性”。它会“驻扎”在这一TCP端口等待回应。这造成类似心跳间隔的连接企图。如果你是一个拨号用户,从另一个聊天者手中“继承”了IP地址这种情况就会发生:好象很多不同的人在测试这一端口。这一协议使用“OPNG”作为其连接企图的前四个字节。

17027 Conducent
这是一个外向连接。这是由于公司内部有人安装了带有Conducent "adbot" 的共享软件。Conducent "adbot"是为共享软件显示广告服务的。使用这种服务的一种流行的软件是Pkware。有人试验:阻断这一外向连接不会有任何问题,但是封掉IP地址本身将会导致adbots持续在每秒内试图连接多次而导致连接过载:
机器会不断试图解析DNS名-ads.conducent.com,即IP地址216.33.210.40 ;216.33.199.77 ;216.33.199.80 ;216.33.199.81;216.33.210.41。(译者:不知NetAnts使用的Radiate是否也有这种现象)

27374 Sub-7木马(TCP)


30100 NetSphere木马(TCP)
通常这一端口的扫描是为了寻找中了NetSphere木马。

31337 Back Orifice “elite”
Hacker中31337读做“elite”/ei’li:t/(译者:法语,译为中坚力量,精华。即3=E, 1=L, 7=T)。因此许多后门程序运行于这一端口。其中最有名的是Back Orifice。曾经一段时间内这是Internet上最常见的扫描。现在它的流行越来越少,其它的木马程序越来越流行。

31789 Hack-a-tack
这一端口的UDP通讯通常是由于"Hack-a-tack"远程访问木马(RAT, Remote Access Trojan)。这种木马包含内置的31790端口扫描器,因此任何31789端口到317890端口的连接意味着已经有这种入侵。(31789端口是控制连接,317890端口是文件传输连接)

32770~32900 RPC服务
Sun Solaris的RPC服务在这一范围内。详细的说:早期版本的Solaris(2.5.1之前)将portmapper置于这一范围内,即使低端口被防火墙封闭仍然允许Hacker/cracker访问这一端口。扫描这一范围内的端口不是为了寻找portmapper,就是为了寻找可被攻击的已知的RPC服务。

33434~33600 traceroute
如果你看到这一端口范围内的UDP数据包(且只在此范围之内)则可能是由于traceroute。参见traceroute部分。
论坛插件加载方法
发帖求助前要善用【论坛搜索】功能,那里可能会有你要找的答案;
如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【D豆】,加分不会扣除自己的积分,做一个热心并受欢迎的人!

已领礼包: 593个

财富等级: 财运亨通

 楼主| 发表于 2004-5-3 00:02:08 | 显示全部楼层

Re: [转贴]:IP 端口对照表

系统服务及木马默认端口表
--------------------------------------------------------------------------------
时间:2002-4-23 10:31:19

-,1,tcpmux,TCP Port Service Multiplexer
-,2,compressnet,Management Utility
-,3,compressnet,Compression Process
-,5,rje,Remote Job Entry
-,7,echo,Echo
-,9,discard,Discard
-,11,systat,Active Users
+,13,daytime,Daytime
-,17,qotd,Quote of the Day
-,18,msp,Message Send Protocol
-,19,chargen,Character Generator
-,20,ftp-data,File Transfer [Default Data]
+,21,ftp,File Transfer [Control]
-,22,ssh,SSH Remote Login Protocol
+,23,telnet,Telnet
-,24,?,any private mail system
+,25,smtp,Simple Mail Transfer
-,27,nsw-fe,NSW User System FE
-,29,msg-icp,MSG ICP
-,31,msg-auth,MSG Authentication
-,33,dsp,Display Support Protocol
-,35,?,any private printer server
-,37,time,Time
-,38,rap,Route Access Protocol
-,39,rlp,Resource Location Protocol
-,41,graphics,Graphics
-,42,nameserver,WINS Host Name Server
-,43,nicname,Who Is
-,44,mpm-flags,MPM FLAGS Protocol
-,45,mpm,Message Processing Module [recv]
-,46,mpm-snd,MPM [default send]
-,47,ni-ftp,NI FTP
-,48,auditd,Digital Audit Daemon
-,49,tacacs,Login Host Protocol (TACACS)
-,50,re-mail-ck,Remote Mail Checking Protocol
-,51,la-maint,IMP Logical Address Maintenance
-,52,xns-time,XNS Time Protocol
+,53,domain,Domain Name Server
-,54,xns-ch,XNS Clearinghouse
-,55,isi-gl,ISI Graphics Language
-,56,xns-auth,XNS Authentication
-,57,?,any private terminal access
-,58,xns-mail,XNS Mail
-,59,?,any private file service
-,60,?,Unassigned
-,61,ni-mail,NI MAIL
-,62,acas,ACA Services
+,63,whois++,whois++
-,64,covia,Communications Integrator (CI)
-,65,tacacs-ds,TACACS-Database Service
-,66,sql*net,Oracle SQL*NET
-,67,bootps,Bootstrap Protocol Server
-,68,bootpc,Bootstrap Protocol Client
-,69,tftp,Trivial File Transfer
-,70,gopher,Gopher
-,71,netrjs-1,Remote Job Service
-,72,netrjs-2,Remote Job Service
-,73,netrjs-3,Remote Job Service
-,74,netrjs-4,Remote Job Service
-,75,?,any private dial out service
-,76,deos,Distributed External Object Store
-,77,?,any private RJE service
-,78,vettcp,vettcp
+,79,finger,Finger
+,80,http,World Wide Web HTTP
-,81,hosts2-ns,HOSTS2 Name Server
-,82,xfer,XFER Utility
-,83,mit-ml-dev,MIT ML Device
-,84,ctf,Common Trace Facility
-,85,mit-ml-dev,MIT ML Device
-,86,mfcobol,Micro Focus Cobol
-,87,?,any private terminal link
-,88,kerberos,Kerberos
-,89,su-mit-tg,SU/MIT Telnet Gateway
-,90,dnsix,DNSIX Securit Attribute Token Map
-,91,mit-dov,MIT Dover Spooler
-,92,npp,Network Printing Protocol
-,93,dcp,Device Control Protocol
-,94,objcall,Tivoli Object Dispatcher
-,95,supdup,SUPDUP
-,96,dixie,DIXIE Protocol Specification
-,97,swift-rvf,Swift Remote Virtural File Protocol
-,98,tacnews,TAC News
-,99,NCX99,NCX99
-,100,newacct,[unauthorized use]
-,101,hostname,NIC Host Name Server
-,102,iso-tsap,ISO-TSAP Class 0
-,103,gppitnp,Genesis Point-to-Point Trans Net
-,104,acr-nema,ACR-NEMA Digital Imag. & Comm. 300
-,105,cso,CCSO name server protocol
-,106,3com-tsmux,3COM-TSMUX
-,107,rtelnet,Remote Telnet Service
-,108,snagas,SNA Gateway Access Server
-,109,pop2,Post Office Protocol - Version 2
+,110,pop3,Post Office Protocol - Version 3
-,111,sunrpc,SUN Remote Procedure Call
-,112,mcidas,McIDAS Data Transmission Protocol
-,113,auth,Authentication Service
-,114,audionews,Audio News Multicast
-,115,sftp,Simple File Transfer Protocol
-,116,ansanotify,ANSA REX Notify
-,117,uucp-path,UUCP Path Service
-,118,sqlserv,SQL Services
+,119,nntp,Network News Transfer Protocol
-,120,cfdptkt,CFDPTKT
-,121,erpc,Encore Expedited Remote Pro.Call
-,122,smakynet,SMAKYNET
-,123,ntp,Network Time Protocol
-,124,ansatrader,ANSA REX Trader
-,125,locus-map,Locus PC-Interface Net Map Ser
-,126,unitary,Unisys Unitary Login
-,127,locus-con,Locus PC-Interface Conn Server
-,128,gss-xlicen,GSS X License Verification
-,129,pwdgen,Password Generator Protocol
-,130,cisco-fna,cisco FNATIVE
-,131,cisco-tna,cisco TNATIVE
-,132,cisco-sys,cisco SYSMAINT
-,133,statsrv,Statistics Service
-,134,ingres-net,INGRES-NET Service
+,135,epmap,DCE endpoint resolution
-,136,profile,PROFILE Naming System
-,137,netbios-ns,NETBIOS Name Service
-,138,netbios-dgm,NETBIOS Datagram Service
+,139,netbios-ssn,NETBIOS Session Service
-,140,emfis-data,EMFIS Data Service
-,141,emfis-cntl,EMFIS Control Service
-,142,bl-idm,Britton-Lee IDM
-,143,imap,Internet Message Access Protocol
-,144,news,NewS
-,145,uaac,UAAC Protocol
-,146,iso-tp0,ISO-IP0
-,147,iso-ip,ISO-IP
-,148,jargon,Jargon
-,149,aed-512,AED 512 Emulation Service
-,150,sql-net,SQL-NET
-,151,hems,HEMS
-,152,bftp,Background File Transfer Program
-,153,sgmp,SGMP
-,154,netsc-prod,NETSC
-,155,netsc-dev,NETSC
-,156,sqlsrv,SQL Service
-,157,knet-cmp,KNET/VM Command/Message Protocol
-,158,pcmail-srv,PCMail Server
-,159,nss-routing,NSS-Routing
-,160,sgmp-traps,SGMP-TRAPS
-,161,snmp,SNMP
-,162,snmptrap,SNMPTRAP
-,163,cmip-man,CMIP Manager
-,164,cmip-agent,CMIP Agent
-,165,xns-courier,Xerox
-,166,s-net,Sirius Systems
-,167,namp,NAMP
-,168,rsvd,RSVD
-,169,send,SEND
-,170,print-srv,Network Posts cript
-,171,multiplex,Network Innovations Multiplex
-,172,cl/1,Network Innovations CL/1
-,173,xyplex-mux,Xyplex
-,174,mailq,MAILQ
-,175,vmnet,VMNET
-,176,genrad-mux,GENRAD-MUX
-,177,xdmcp,X Display Manager Control Protocol
-,178,nextstep,NextStep Window Server
-,179,bgp,Border Gateway Protocol
-,180,ris,Intergraph
-,181,unify,Unify
-,182,audit,Unisys Audit SITP
-,183,ocbinder,OCBinder
-,184,ocserver,OCServer
-,185,remote-kis,Remote-KIS
-,186,kis,KIS Protocol
-,187,aci,Application Communication Interface
-,188,mumps,Plus Five's MUMPS
-,189,qft,Queued File Transport
-,190,gacp,Gateway Access Control Protocol
-,191,prospero,Prospero Directory Service
-,192,osu-nms,OSU Network Monitoring System
-,193,srmp,Spider Remote Monitoring Protocol
-,194,irc,Internet Relay Chat Protocol
-,195,dn6-nlm-aud,DNSIX Network Level Module Audit
-,196,dn6-smm-red,DNSIX Session Mgt Module Audit Redir
-,197,dls,Directory Location Service
-,198,dls-mon,Directory Location Service Monitor
-,199,smux,SMUX
-,200,src,IBM System Resource Controller
-,201,at-rtmp,AppleTalk Routing Maintenance
-,202,at-nbp,AppleTalk Name Binding
-,203,at-3,AppleTalk Unused
-,204,at-echo,AppleTalk Echo
-,205,at-5,AppleTalk Unused
-,206,at-zis,AppleTalk Zone Information
-,207,at-7,AppleTalk Unused
-,208,at-8,AppleTalk Unused
-,209,qmtp,The Quick Mail Transfer Protocol
-,210,z39.50,ANSI Z39.50
-,211,914c/g,Texas Instruments 914C/G Terminal
-,212,anet,ATEXSSTR
-,213,ipx,IPX
-,214,vmpwscs,VM PWSCS
-,215,softpc,Insignia Solutions
-,216,CAIlic,Computer Associates Int'l License Server
-,217,dbase,dBASE Unix
-,218,mpp,Netix Message Posting Protocol
-,219,uarps,Unisys ARPs
-,220,imap3,Interactive Mail Access Protocol v3
-,221,fln-spx,Berkeley rlogind with SPX auth
-,222,rsh-spx,Berkeley rshd with SPX auth
-,223,cdc,Certificate Distribution Center
-,242,direct,Direct
-,243,sur-meas,Survey Measurement
-,244,dayna,Dayna
-,245,link,LINK
-,246,dsp3270,Display Systems Protocol
-,256,rap,RAP
-,257,set,Secure Electronic Transaction
-,258,yak-chat,Yak Winsock Personal Chat
-,259,esro-gen,Efficient Short Remote Operations
-,260,openport,Openport
-,261,naming-iiop-ssl,IIOP Naming Service (SSL)
-,262,arcisdms,Arcisdms
-,263,hdap,HDAP
-,280,http-mgmt,http-mgmt
-,281,personal-link,Personal Link
-,282,cableport-ax,Cable Port A/X
-,309,entrusttime,EntrustTime
-,344,pdap,Prospero Data Access Protocol
-,345,pawserv,Perf Analysis Workbench
-,346,zserv,Zebra server
-,347,fatserv,Fatmen Server
-,348,csi-sgwp,Cabletron Management Protocol
-,349,mftp,mftp
-,350,matip-type-a,MATIP Type A
-,351,matip-type-b,MATIP Type B
-,371,clearcase,Clearcase
-,372,ulistproc,ListProcessor
-,373,legent-1,Legent Corporation
-,374,legent-2,Legent Corporation
-,375,hassle,Hassle
-,376,nip,Amiga Envoy Network Inquiry Proto
-,377,tnETOS,NEC Corporation
-,378,dsETOS,NEC Corporation
-,379,is99c,TIA/EIA/IS-99 modem client
-,380,is99s,TIA/EIA/IS-99 modem server
-,381,hp-collector,hp performance data collector
-,382,hp-managed-node,hp performance data managed node
-,383,hp-alarm-mgr,hp performance data alarm manager
-,384,arns,A Remote Network Server System
-,385,ibm-app,IBM Application
-,386,asa,ASA Message Router Object Def.
-,387,aurp,Appletalk Update-Based Routing Pro.
-,388,unidata-ldm,Unidata LDM Version 4
-,389,ldap,Lightweight Directory Access Protocol
-,390,uis,UIS
-,391,synotics-relay,SynOptics SNMP Relay Port
-,392,synotics-broker,SynOptics Port Broker Port
-,393,dis,Data Interpretation System
-,394,embl-ndt,EMBL Nucleic Data Transfer
-,395,netcp,NETscout Control Protocol
-,396,netware-ip,Novell Netware over IP
-,397,mptn,Multi Protocol Trans. Net.
-,398,kryptolan,Kryptolan
-,399,iso-tsap-c2,ISO Transport Class 2 Non-Control over TCP
-,400,work-sol,Workstation Solutions
-,401,ups,Uninterruptible Power Supply
-,402,genie,Genie Protocol
-,403,decap,decap
-,404,nced,nced
-,405,ncld,ncld
-,406,imsp,Interactive Mail Support Protocol
-,407,timbuktu,Timbuktu
-,408,prm-sm,Prospero Resource Manager Sys. Man.
-,409,prm-nm,Prospero Resource Manager Node Man.
-,410,decladebug,DECLadebug Remote Debug Protocol
-,411,rmt,Remote MT Protocol
-,412,synoptics-trap,Trap Convention Port
-,413,smsp,SMSP
-,414,infoseek,InfoSeek
-,415,bnet,BNet
-,416,silverplatter,Silverplatter
-,417,onmux,Onmux
-,418,hyper-g,Hyper-G
-,419,ariel1,Ariel
-,420,smpte,SMPTE
-,421,ariel2,Ariel
-,422,ariel3,Ariel
-,423,opc-job-start,IBM Operations Planning and Control Start
-,424,opc-job-track,IBM Operations Planning and Control Track
-,425,icad-el,ICAD
-,426,smartsdp,smartsdp
-,427,svrloc,Server Location
-,428,ocs_cmu,OCS_CMU
-,429,ocs_amu,OCS_AMU
-,430,utmpsd,UTMPSD
-,431,utmpcd,UTMPCD
-,432,iasd,IASD
-,433,nnsp,NNSP
-,434,mobileip-agent,MobileIP-Agent
-,435,mobilip-mn,MobilIP-MN
-,436,dna-cml,DNA-CML
-,437,comscm,comscm
-,438,dsfgw,dsfgw
-,439,dasp,dasp Thomas Obermair
-,440,sgcp,sgcp
-,441,decvms-sysmgt,decvms-sysmgt
-,442,cvc_hostd,cvc_hostd
+,443,https,https MCom
-,444,snpp,Simple Network Paging Protocol
-,445,microsoft-ds,Microsoft-DS
-,446,ddm-rdb,DDM-RDB
-,447,ddm-dfm,DDM-RFM
-,448,ddm-byte,DDM-BYTE
-,449,as-servermap,AS Server Mapper
-,450,tserver,TServer
-,451,sfs-smp-net,Cray Network Semaphore server
-,452,sfs-config,Cray SFS config server
-,453,creativeserver,CreativeServer
-,454,contentserver,ContentServer
-,455,creativepartnr,CreativePartnr
-,456,macon-tcp,macon-tcp
-,457,scohelp,scohelp
-,458,appleqtc,apple quick time
-,459,ampr-rcmd,ampr-rcmd
-,460,skronk,skronk
-,461,datasurfsrv,DataRampSrv
-,462,datasurfsrvsec,DataRampSrvSec
-,463,alpes,alpes
-,464,kpasswd,kpasswd
-,465,ssmtp,ssmtp
-,466,digital-vrc,digital-vrc
-,467,mylex-mapd,mylex-mapd
-,468,photuris,proturis
-,469,rcp,Radio Control Protocol
-,470,scx-proxy,scx-proxy
-,471,mondex,Mondex
-,472,ljk-login,ljk-login
-,473,hybrid-pop,hybrid-pop
-,474,tn-tl-w1,tn-tl-w1
-,475,tcpnethaspsrv,tcpnethaspsrv
-,476,tn-tl-fd1,tn-tl-fd1
-,477,ss7ns,ss7ns
-,478,spsc,spsc
-,479,iafserver,iafserver
-,480,iafdbase,iafdbase
-,481,ph,Ph service
-,482,bgs-nsi,bgs-nsi
-,483,ulpnet,ulpnet
-,484,integra-sme,Integra Software Management Environment
-,485,powerburst,Air Soft Power Burst
-,486,avian,avian
-,487,saft,saft
-,488,gss-http,gss-http
-,489,nest-protocol,nest-protocol
-,490,micom-pfs,micom-pfs
-,491,go-login,go-login
-,492,ticf-1,Transport Independent Convergence for FNA
-,493,ticf-2,Transport Independent Convergence for FNA
-,494,pov-ray,POV-Ray
-,495,intecourier,intecourier
-,496,pim-rp-disc,PIM-RP-DISC
-,497,dantz,dantz
-,498,siam,siam
-,499,iso-ill,ISO ILL Protocol
-,500,isakmp,isakmp
-,501,stmf,STMF
-,502,asa-appl-proto,asa-appl-proto
-,503,intrinsa,Intrinsa
-,504,citadel,citadel
-,505,mailbox-lm,mailbox-lm
-,506,ohimsrv,ohimsrv
-,507,crs,crs
-,508,xvttp,xvttp
-,509,snare,snare
-,510,fcp,FirstClass Protocol
-,511,mynet,mynet-as
-,512,exec,remote process execution;
+,513,login,remote login a la telnet;
-,514,shell,cmd
-,515,printer,spooler
-,516,videotex,videotex
-,517,talk,like tenex link
-,518,ntalk,?
-,519,utime,unixtime
-,520,efs,extended file name server
-,521,ripng,ripng
-,522,ulp,ULP
-,523,ibm-db2,IBM-DB2
-,524,ncp,NCP
-,525,timed,timeserver
-,526,tempo,newdate
-,527,stx,Stock IXChange
-,528,custix,Customer IXChange
-,529,irc-serv,IRC-SERV
-,530,courier,rpc
-,531,conference,chat
-,532,netnews,readnews
-,533,netwall,for emergency broadcasts
-,534,mm-admin,MegaMedia Admin
-,535,iiop,iiop
-,536,opalis-rdv,opalis-rdv
-,537,nmsp,Networked Media Streaming Protocol
-,538,gdomap,gdomap
-,539,apertus-ldp,Apertus Technologies Load Determination
-,540,uucp,uucpd
-,541,uucp-rlogin,uucp-rlogin
-,542,commerce,commerce
-,543,klogin,?
-,544,kshell,krcmd
-,545,appleqtcsrvr,appleqtcsrvr
-,546,dhcpv6-client,DHCPv6 Client
-,547,dhcpv6-server,DHCPv6 Server
-,548,afpovertcp,AFP over TCP
-,549,idfp,IDFP
-,550,new-rwho,new-who
-,551,cybercash,cybercash
-,552,deviceshare,deviceshare
-,553,pirp,pirp
-,554,rtsp,Real Time Stream Control Protocol
-,555,dsf,?
-,556,remotefs,rfs server
-,557,openvms-sysipc,openvms-sysipc
-,558,sdnskmp,SDNSKMP
-,559,teedtap,TEEDTAP
-,560,rmonitor,rmonitord
-,561,monitor,?
-,562,chshell,chcmd
-,563,snews,snews
-,564,9pfs,plan 9 file service
-,565,whoami,whoami
-,566,streettalk,streettalk
-,567,banyan-rpc,banyan-rpc
-,568,ms-shuttle,microsoft shuttle
-,569,ms-rome,microsoft rome
-,570,meter,demon
-,571,meter,udemon
-,572,sonar,sonar
-,573,banyan-vip,banyan-vip
-,574,ftp-agent,FTP Software Agent System
-,575,vemmi,VEMMI
-,576,ipcd,ipcd
-,577,vnas,vnas
-,578,ipdd,ipdd
-,579,decbsrv,decbsrv
-,580,sntp-heartbeat,SNTP HEARTBEAT
-,581,bdp,Bundle Discovery Protocol
-,600,ipcserver,Sun IPC server
-,606,urm,Cray Unified Resource Manager
-,607,nqs,nqs
-,608,nsift-uft,Sender-Initiated/Unsolicited File Transfer
-,609,npmp-trap,npmp-trap
-,610,npmp-local,npmp-local
-,611,npmp-gui,npmp-gui
-,612,hmmp-ind,HMMP Indication
-,613,hmmp-op,HMMP Operation
-,614,sshell,SSLshell
-,615,sco-inetmgr,Internet Configuration Manager
-,616,sco-sysmgr,SCO System Administration Server
-,617,sco-dtmgr,SCO Desktop Administration Server
-,618,dei-icda,DEI-ICDA
-,619,digital-evm,Digital EVM
-,620,sco-websrvrmgr,SCO WebServer Manager
-,633,servstat,Service Status update (Sterling Software)
-,634,ginad,ginad
-,635,rlzdbase,RLZ DBase
-,636,ssl-ldap,ssl-ldap
-,637,lanserver,lanserver
-,666,mdqs,?
-,667,disclose,campaign contribution disclosures - SDR Technolog
-,668,mecomm,MeComm
-,669,meregister,MeRegister
-,670,vacdsm-sws,VACDSM-SWS
-,671,vacdsm-app,VACDSM-APP
-,672,vpps-qua,VPPS-QUA
-,673,cimplex,CIMPLEX
-,674,acap,ACAP
-,704,elcsd,errlog copy/server daemon
-,705,agentx,AgentX
-,709,entrust-kmsh,Entrust Key Management Service Handler
-,710,entrust-ash,Entrust Administration Service Handler
-,729,netviewdm1,IBM NetView DM/6000 Server/Client
-,730,netviewdm2,IBM NetView DM/6000 send
-,731,netviewdm3,IBM NetView DM/6000 receive
-,741,netgw,netGW
-,742,netrcs,Network based Rev. Cont. Sys.
-,744,flexlm,Flexible License Manager
-,747,fujitsu-dev,Fujitsu Device Control
-,748,ris-cm,Russell Info Sci Calendar Manager
-,749,kerberos-adm,kerberos administration
-,750,rfile,?
-,751,pump,?
-,752,qrh,?
-,753,rrh,?
-,754,tell,send
-,758,nlogin,?
-,759,con,?
-,760,ns,?
-,761,rxe,?
-,762,quotad,?
-,763,cycleserv,?
-,764,omserv,?
-,765,webster,?
-,767,phonebook,phone
-,769,vid,?
-,770,cadlock,?
-,771,rtip,?
-,772,cycleserv2,?
-,773,submit,?
-,774,rpasswd,?
-,775,entomb,?
-,776,wpages,?
-,780,wpgs,?
-,786,concert,Concert
-,800,mdbs_daemon,?
-,801,device,?
-,886,iclcnet-locate,ICL coNETion locate server
-,887,iclcnet_svinfo,ICL coNETion server info
-,888,accessbuilder,AccessBuilder
-,911,xact-backup,xact-backup
-,991,nas,Netnews Administration System
-,995,spop3,SSL based POP3
-,996,vsinet,vsinet
-,997,maitrd,?
-,998,busboy,?
-,999,garcon,?
-,1000,cadlock,?
-,1024,YAI,NetSpy.698
-,1025,blackjack,network blackjack
-,1027,ICQ,ICQ?
-,1030,iad1,BBN IAD
-,1031,iad2,BBN IAD
-,1032,iad3,BBN IAD
-,1047,neod1,Sun's NEO Object Request Broker
-,1048,neod2,Sun's NEO Object Request Broker
-,1058,nim,nim
-,1059,nimreg,nimreg
-,1067,instl_boots,Installation Bootstrap Proto. Serv.
-,1068,instl_bootc,Installation Bootstrap Proto. Cli.
-,1080,socks,Socks
-,1083,ansoft-lm-1,Anasoft License Manager
-,1084,ansoft-lm-2,Anasoft License Manager
-,1110,nfsd-status,Cluster status info
-,1123,murray,Murray
-,1155,nfa,Network File Access
-,1212,lupa,lupa
-,1222,nerv,SNI R&D network
-,1243,Trojan,SubSeven
-,1248,hermes,?
-,1313,bmc_patroldb,BMC_PATROLDB
-,1314,pdps,Photos cript Distributed Printing System
-,1345,vpjp,VPJP
-,1346,alta-ana-lm,Alta Analytics License Manager
-,1347,bbn-mmc,multi media conferencing
-,1348,bbn-mmx,multi media conferencing
-,1349,sbook,Registration Network Protocol
-,1350,editbench,Registration Network Protocol
-,1351,equationbuilder,Digital Tool Works (MIT)
-,1352,lotusnote,Lotus Note
-,1353,relief,Relief Consulting
-,1354,rightbrain,RightBrain Software
-,1355,intuitive edge,Intuitive Edge
-,1356,cuillamartin,CuillaMartin Company
-,1357,pegboard,Electronic PegBoard
-,1358,connlcli,CONNLCLI
-,1359,ftsrv,FTSRV
-,1360,mimer,MIMER
-,1361,linx,LinX
-,1362,timeflies,TimeFlies
-,1363,ndm-requester,Network DataMover Requester
-,1364,ndm-server,Network DataMover Server
-,1365,adapt-sna,Network Software Associates
-,1366,netware-csp,Novell NetWare Comm Service Platform
-,1367,dcs,DCS
-,1368,screencast,ScreenCast
-,1369,gv-us,GlobalView to Unix Shell
-,1370,us-gv,Unix Shell to GlobalView
-,1371,fc-cli,Fujitsu Config Protocol
-,1372,fc-ser,Fujitsu Config Protocol
-,1373,chromagrafx,Chromagrafx
-,1374,molly,EPI Software Systems
-,1375,bytex,Bytex
-,1376,ibm-pps,IBM Person to Person Software
-,1377,cichlid,Cichlid License Manager
-,1378,elan,Elan License Manager
-,1379,dbreporter,Integrity Solutions
-,1380,telesis-licman,Telesis Network License Manager
-,1381,apple-licman,Apple Network License Manager
-,1382,udt_os,?
-,1383,gwha,GW Hannaway Network License Manager
-,1384,os-licman,Objective Solutions License Manager
-,1385,atex_elmd,Atex Publishing License Manager
-,1386,checksum,CheckSum License Manager
-,1387,cadsi-lm,Computer Aided Design Software Inc LM
-,1388,objective-dbc,Objective Solutions DataBase Cache
-,1389,iclpv-dm,Document Manager
-,1390,iclpv-sc,Storage Controller
-,1391,iclpv-sas,Storage Access Server
-,1392,iclpv-pm,Print Manager
-,1393,iclpv-nls,Network Log Server
-,1394,iclpv-nlc,Network Log Client
-,1395,iclpv-wsm,PC Workstation Manager software
-,1396,dvl-activemail,DVL Active Mail
-,1397,audio-activmail,Audio Active Mail
-,1398,video-activmail,Video Active Mail
-,1399,cadkey-licman,Cadkey License Manager
-,1400,cadkey-tablet,Cadkey Tablet Daemon
-,1401,goldleaf-licman,Goldleaf License Manager
-,1402,prm-sm-np,Prospero Resource Manager
-,1403,prm-nm-np,Prospero Resource Manager
-,1404,igi-lm,Infinite Graphics License Manager
-,1405,ibm-res,IBM Remote Execution Starter
-,1406,netlabs-lm,NetLabs License Manager
-,1407,dbsa-lm,DBSA License Manager
-,1408,sophia-lm,Sophia License Manager
-,1409,here-lm,Here License Manager
-,1410,hiq,HiQ License Manager
-,1411,af,AudioFile
-,1412,innosys,InnoSys
-,1413,innosys-acl,Innosys-ACL
-,1414,ibm-mqseries,IBM MQSeries
-,1415,dbstar,DBStar
-,1416,novell-lu6.2,Novell LU6.2
-,1417,timbuktu-srv1,Timbuktu Service 1 Port
-,1418,timbuktu-srv2,Timbuktu Service 2 Port
-,1419,timbuktu-srv3,Timbuktu Service 3 Port
-,1420,timbuktu-srv4,Timbuktu Service 4 Port
-,1421,gandalf-lm,Gandalf License Manager
-,1422,autodesk-lm,Autodesk License Manager
-,1423,essbase,Essbase Arbor Software
-,1424,hybrid,Hybrid Encryption Protocol
-,1425,zion-lm,Zion Software License Manager
-,1426,sais,Satellite-data Acquisition System 1
-,1427,mloadd,mloadd monitoring tool
-,1428,informatik-lm,Informatik License Manager
-,1429,nms,Hypercom NMS
-,1430,tpdu,Hypercom TPDU
-,1431,rgtp,Reverse Gossip Transport
-,1432,blueberry-lm,Blueberry Software License Manager
-,1433,ms-sql-s,Microsoft-SQL-Server
-,1434,ms-sql-m,Microsoft-SQL-Monitor
-,1435,ibm-cics,IBM CICS
-,1436,saism,Satellite-data Acquisition System 2
-,1437,tabula,Tabula
-,1438,eicon-server,Eicon Security Agent/Server
-,1439,eicon-x25,Eicon X25/SNA Gateway
-,1440,eicon-slp,Eicon Service Location Protocol
-,1441,cadis-1,Cadis License Management
-,1442,cadis-2,Cadis License Management
-,1443,ies-lm,Integrated Engineering Software
-,1444,marcam-lm,Marcam License Management
-,1445,proxima-lm,Proxima License Manager
-,1446,ora-lm,Optical Research Associates License Manager
-,1447,apri-lm,Applied Parallel Research LM
-,1448,oc-lm,OpenConnect License Manager
-,1449,peport,PEport
-,1450,dwf,Tandem Distributed Workbench Facility
-,1451,infoman,IBM Information Management
-,1452,gtegsc-lm,GTE Government Systems License Man
-,1453,genie-lm,Genie License Manager
-,1454,interhdl_elmd,interHDL License Manager
-,1455,esl-lm,ESL License Manager
-,1456,dca,DCA
-,1457,valisys-lm,Valisys License Manager
-,1458,nrcabq-lm,Nichols Research Corp.
-,1459,proshare1,Proshare Notebook Application
-,1460,proshare2,Proshare Notebook Application
-,1461,ibm_wrless_lan,IBM Wireless LAN
-,1462,world-lm,World License Manager
-,1463,nucleus,Nucleus
-,1464,msl_lmd,MSL License Manager
-,1465,pipes,Pipes Platform
-,1466,oceansoft-lm,Ocean Software License Manager
-,1467,csdmbase,CSDMBASE
-,1468,csdm,CSDM
-,1469,aal-lm,Active Analysis Limited License Manager
-,1470,uaiact,Universal Analytics
-,1471,csdmbase,csdmbase
-,1472,csdm,csdm
-,1473,openmath,OpenMath
-,1474,telefinder,Telefinder
-,1475,taligent-lm,Taligent License Manager
-,1476,clvm-cfg,clvm-cfg
-,1477,ms-sna-server,ms-sna-server
-,1478,ms-sna-base,ms-sna-base
-,1479,dberegister,dberegister
-,1480,pacerforum,PacerForum
-,1481,airs,AIRS
-,1482,miteksys-lm,Miteksys License Manager
-,1483,afs,AFS License Manager
-,1484,confluent,Confluent License Manager
-,1485,lansource,LANSource
-,1486,nms_topo_serv,nms_topo_serv
-,1487,localinfosrvr,LocalInfoSrvr
-,1488,docstor,DocStor
-,1489,dmdocbroker,dmdocbroker
-,1490,insitu-conf,insitu-conf
-,1491,anynetgateway,anynetgateway
-,1492,stone-design-1,stone-design-1
-,1493,netmap_lm,netmap_lm
-,1494,ica,ica
-,1495,cvc,cvc
-,1496,liberty-lm,liberty-lm
-,1497,rfx-lm,rfx-lm
-,1498,watcom-sql,Watcom-SQL
-,1499,fhc,Federico Heinz Consultora
-,1500,vlsi-lm,VLSI License Manager
-,1501,saiscm,Satellite-data Acquisition System 3
-,1502,shivadiscovery,Shiva
-,1503,imtc-mcs,Databeam
-,1504,evb-elm,EVB Software Engineering License Manager
-,1505,funkproxy,Funk Software
-,1506,utcd,Universal Time daemon (utcd)
-,1507,symplex,symplex
-,1508,diagmond,diagmond
-,1509,robcad-lm,Robcad
-,1510,mvx-lm,Midland Valley Exploration Ltd. Lic. Man.
-,1511,3l-l1,3l-l1
-,1512,wins,Microsoft's Windows Internet Name Service
-,1513,fujitsu-dtc,Fujitsu Systems Business of America
-,1514,fujitsu-dtcns,Fujitsu Systems Business of America
-,1515,ifor-protocol,ifor-protocol
-,1516,vpad,Virtual Places Audio data
-,1517,vpac,Virtual Places Audio control
-,1518,vpvd,Virtual Places Video data
-,1519,vpvc,Virtual Places Video control
-,1520,atm-zip-office,atm zip office
-,1521,ncube-lm,nCube License Manager
-,1522,ricardo-lm,Ricardo North America License Manager
-,1523,cichild-lm,cichild
-,1524,ingreslock,ingres
-,1525,orasrv,oracle
-,1526,pdap-np,Prospero Data Access Prot non-priv
-,1527,tlisrv,oracle
-,1528,mciautoreg,micautoreg
-,1529,coauthor,oracle
-,1530,rap-service,rap-service
-,1531,rap-listen,rap-listen
-,1532,miroconnect,miroconnect
-,1533,virtual-places,Virtual Places Software
-,1534,micromuse-lm,micromuse-lm
-,1535,ampr-info,ampr-info
-,1536,ampr-inter,ampr-inter
-,1537,sdsc-lm,isi-lm
-,1538,3ds-lm,3ds-lm
-,1539,intellistor-lm,Intellistor License Manager
-,1540,rds,rds
-,1541,rds2,rds2
-,1542,gridgen-elmd,gridgen-elmd
-,1543,simba-cs,simba-cs
-,1544,aspeclmd,aspeclmd
-,1545,vistium-share,vistium-share
-,1546,abbaccuray,abbaccuray
-,1547,laplink,laplink
-,1548,axon-lm,Axon License Manager
-,1549,shivahose,Shiva Hose
-,1550,3m-image-lm,Image Storage license manager 3M Company
-,1551,hecmtl-db,HECMTL-DB
-,1552,pciarray,pciarray
-,1553,sna-cs,sna-cs
-,1554,caci-lm,CACI Products Company License Manager
-,1555,livelan,livelan
-,1556,ashwin,AshWin CI Tecnologies
-,1557,arbortext-lm,ArborText License Manager
-,1558,xingmpeg,xingmpeg
-,1559,web2host,web2host
-,1560,asci-val,asci-val
-,1561,facilityview,facilityview
-,1562,pconnectmgr,pconnectmgr
-,1563,cadabra-lm,Cadabra License Manager
-,1564,pay-per-view,Pay-Per-View
-,1565,winddlb,WinDD
-,1566,corelvideo,CORELVIDEO
-,1567,jlicelmd,jlicelmd
-,1568,tsspmap,tsspmap
-,1569,ets,ets
-,1570,orbixd,orbixd
-,1571,rdb-dbs-disp,Oracle Remote Data Base
-,1572,chip-lm,Chipcom License Manager
-,1573,itscomm-ns,itscomm-ns
-,1574,mvel-lm,mvel-lm
-,1575,oraclenames,oraclenames
-,1576,moldflow-lm,moldflow-lm
-,1577,hypercube-lm,hypercube-lm
-,1578,jacobus-lm,Jacobus License Manager
-,1579,ioc-sea-lm,ioc-sea-lm
-,1580,tn-tl-r1,tn-tl-r1
-,1581,vmf-msg-port,vmf-msg-port
-,1582,msims,MSIMS
-,1583,simbaexpress,simbaexpress
-,1584,tn-tl-fd2,tn-tl-fd2
-,1585,intv,intv
-,1586,ibm-abtact,ibm-abtact
-,1587,pra_elmd,pra_elmd
-,1588,triquest-lm,triquest-lm
-,1589,vqp,VQP
-,1590,gemini-lm,gemini-lm
-,1591,ncpm-pm,ncpm-pm
-,1592,commonspace,commonspace
-,1593,mainsoft-lm,mainsoft-lm
-,1594,sixtrak,sixtrak
-,1595,radio,radio
-,1596,radio-sm,radio-sm
-,1597,orbplus-iiop,orbplus-iiop
-,1598,picknfs,picknfs
-,1599,simbaservices,simbaservices
-,1600,issd,?
-,1601,aas,aas
-,1602,inspect,inspect
-,1603,picodbc,pickodbc
-,1604,icabrowser,icabrowser
-,1605,slp,Salutation Manager (Salutation Protocol)
-,1606,slm-api,Salutation Manager (SLM-API)
-,1607,stt,stt
-,1608,smart-lm,Smart Corp. License Manager
-,1609,isysg-lm,isysg-lm
-,1610,taurus-wh,taurus-wh
-,1611,ill,Inter Library Loan
-,1612,netbill-trans,NetBill Transaction Server
-,1613,netbill-keyrep,NetBill Key Repository
-,1614,netbill-cred,NetBill Credential Server
-,1615,netbill-auth,NetBill Authorization Server
-,1616,netbill-prod,NetBill Product Server
-,1617,nimrod-agent,Nimrod Inter-Agent Communication
-,1618,skytelnet,skytelnet
-,1619,xs-openstorage,xs-openstorage
-,1620,faxportwinport,faxportwinport
-,1621,softdataphone,softdataphone
-,1622,ontime,ontime
-,1623,jaleosnd,jaleosnd
-,1624,udp-sr-port,udp-sr-port
-,1625,svs-omagent,svs-omagent
-,1636,cncp,CableNet Control Protocol
-,1637,cnap,CableNet Admin Protocol
-,1638,cnip,CableNet Info Protocol
-,1639,cert-initiator,cert-initiator
-,1640,cert-responder,cert-responder
-,1641,invision,InVision
-,1642,isis-am,isis-am
-,1643,isis-ambc,isis-ambc
-,1644,saiseh,Satellite-data Acquisition System 4
-,1645,datametrics,datametrics
-,1646,sa-msg-port,sa-msg-port
-,1647,rsap,rsap
-,1648,concurrent-lm,concurrent-lm
-,1649,inspect,inspect
-,1650,nkd,?
-,1651,shiva_confsrvr,shiva_confsrvr
-,1652,xnmp,xnmp
-,1653,alphatech-lm,alphatech-lm
-,1654,stargatealerts,stargatealerts
-,1655,dec-mbadmin,dec-mbadmin
-,1656,dec-mbadmin-h,dec-mbadmin-h
-,1657,fujitsu-mmpdc,fujitsu-mmpdc
-,1658,sixnetudr,sixnetudr
-,1659,sg-lm,Silicon Grail License Manager
-,1660,skip-mc-gikreq,skip-mc-gikreq
-,1661,netview-aix-1,netview-aix-1
-,1662,netview-aix-2,netview-aix-2
-,1663,netview-aix-3,netview-aix-3
-,1664,netview-aix-4,netview-aix-4
-,1665,netview-aix-5,netview-aix-5
-,1666,netview-aix-6,netview-aix-6
-,1667,netview-aix-7,netview-aix-7
-,1668,netview-aix-8,netview-aix-8
-,1669,netview-aix-9,netview-aix-9
-,1670,netview-aix-10,netview-aix-10
-,1671,netview-aix-11,netview-aix-11
-,1672,netview-aix-12,netview-aix-12
-,1673,proshare-mc-1,Intel Proshare Multicast
-,1674,proshare-mc-2,Intel Proshare Multicast
-,1675,pdp,Pacific Data Products
-,1676,netcomm1,netcomm1
-,1677,groupwise,groupwise
-,1678,prolink,prolink
-,1679,darcorp-lm,darcorp-lm
-,1680,microcom-sbp,microcom-sbp
-,1681,sd-elmd,sd-elmd
-,1682,lanyon-lantern,lanyon-lantern
-,1683,ncpm-hip,ncpm-hip
-,1684,snaresecure,SnareSecure
-,1685,n2nremote,n2nremote
-,1686,cvmon,cvmon
-,1687,nsjtp-ctrl,nsjtp-ctrl
-,1688,nsjtp-data,nsjtp-data
-,1689,firefox,firefox
-,1690,ng-umds,ng-umds
-,1691,empire-empuma,empire-empuma
-,1692,sstsys-lm,sstsys-lm
-,1693,rrirtr,rrirtr
-,1694,rrimwm,rrimwm
-,1695,rrilwm,rrilwm
-,1696,rrifmm,rrifmm
-,1697,rrisat,rrisat
-,1698,rsvp-encap-1,RSVP-ENCAPSULATION-1
-,1699,rsvp-encap-2,RSVP-ENCAPSULATION-2
-,1700,mps-raft,mps-raft
-,1701,l2f,l2f
-,1702,deskshare,deskshare
-,1703,hb-engine,hb-engine
-,1704,bcs-broker,bcs-broker
-,1705,slingshot,slingshot
-,1706,jetform,jetform
-,1707,vdmplay,vdmplay
-,1708,gat-lmd,gat-lmd
-,1709,centra,centra
-,1710,impera,impera
-,1711,pptconference,pptconference
-,1712,registrar,resource monitoring service
-,1713,conferencetalk,ConferenceTalk
-,1714,sesi-lm,sesi-lm
-,1715,houdini-lm,houdini-lm
-,1716,xmsg,xmsg
-,1717,fj-hdnet,fj-hdnet
-,1718,h323gatedisc,h323gatedisc
-,1719,h323gatestat,h323gatestat
-,1720,h323hostcall,h323hostcall
-,1721,caicci,caicci
-,1722,hks-lm,HKS License Manager
-,1723,pptp,pptp
-,1724,csbphonemaster,csbphonemaster
-,1725,iden-ralp,iden-ralp
-,1726,iberiagames,IBERIAGAMES
-,1727,winddx,winddx
-,1728,telindus,TELINDUS
-,1729,citynl,CityNL License Management
-,1730,roketz,roketz
-,1731,msiccp,MSICCP
-,1732,proxim,proxim
-,1733,sipat,sipat
-,1734,cambertx-lm,Camber Corporation License Management
-,1735,privatechat,PrivateChat
-,1736,street-stream,street-stream
-,1737,ultimad,ultimad
-,1738,gamegen1,GameGen1
-,1739,webaccess,webaccess
-,1740,encore,encore
-,1741,cisco-net-mgmt,cisco-net-mgmt
-,1742,3Com-nsd,3Com-nsd
-,1743,cinegrfx-lm,Cinema Graphics License Manager
-,1744,ncpm-ft,ncpm-ft
-,1745,remote-winsock,remote-winsock
-,1746,ftrapid-1,ftrapid-1
-,1747,ftrapid-2,ftrapid-2
-,1748,oracle-em1,oracle-em1
-,1749,aspen-services,aspen-services
-,1750,sslp,Simple Socket Library's PortMaster
-,1751,swiftnet,SwiftNet
-,1752,lofr-lm,Leap of Faith Research License Manager
-,1753,translogic-lm,Translogic License Manager
-,1754,oracle-em2,oracle-em2
-,1755,ms-streaming,ms-streaming
-,1756,capfast-lmd,capfast-lmd
-,1757,cnhrp,cnhrp
-,1758,tftp-mcast,tftp-mcast
-,1759,spss-lm,SPSS License Manager
-,1760,www-ldap-gw,www-ldap-gw
-,1761,cft-0,cft-0
-,1762,cft-1,cft-1
-,1763,cft-2,cft-2
-,1764,cft-3,cft-3
-,1765,cft-4,cft-4
-,1766,cft-5,cft-5
-,1767,cft-6,cft-6
-,1768,cft-7,cft-7
-,1769,bmc-net-adm,bmc-net-adm
-,1770,bmc-net-svc,bmc-net-svc
-,1771,vaultbase,vaultbase
-,1772,essweb-gw,EssWeb Gateway
-,1773,kmscontrol,KMSControl
-,1774,global-dtserv,global-dtserv
-,1776,femis,Federal Emergency Management Information System
-,1777,powerguardian,powerguardian
-,1778,prodigy-internet,prodigy-internet
-,1779,pharmasoft,pharmasoft
-,1780,dpkeyserv,dpkeyserv
-,1781,answersoft-lm,answersoft-lm
-,1782,hp-hcip,hp-hcip
-,1783,fjris,Fujitsu Remote Install Service
-,1784,finle-lm,Finle License Manager
-,1785,windlm,Wind River Systems License Manager
-,1786,funk-logger,funk-logger
-,1787,funk-license,funk-license
-,1788,psmond,psmond
-,1789,hello,hello
-,1790,nmsp,Narrative Media Streaming Protocol
-,1791,ea1,EA1
-,1792,ibm-dt-2,ibm-dt-2
-,1793,rsc-robot,rsc-robot
-,1794,cera-bcm,cera-bcm
-,1795,dpi-proxy,dpi-proxy
-,1796,vocaltec-admin,Vocaltec Server Administration
-,1797,uma,UMA
-,1798,etp,Event Transfer Protocol
-,1799,netrisk,NETRISK
-,1800,ansys-lm,ANSYS-License manager
-,1801,msmq,Microsoft Message Que
-,1802,concomp1,ConComp1
-,1803,hp-hcip-gwy,HP-HCIP-GWY
-,1804,enl,ENL
-,1805,enl-name,ENL-Name
-,1806,musiconline,Musiconline
-,1807,fhsp,Fujitsu Hot Standby Protocol
-,1808,oracle-vp2,Oracle-VP2
-,1809,oracle-vp1,Oracle-VP1
-,1810,jerand-lm,Jerand License Manager
-,1811,scientia-sdb,Scientia-SDB
-,1812,radius,RADIUS
-,1813,radius-acct,RADIUS Accounting
-,1814,tdp-suite,TDP Suite
-,1815,mmpft,MMPFT
-,1818,etftp,Enhanced Trivial File Transfer Protocol
-,1819,plato-lm,Plato License Manager
-,1820,mcagent,mcagent
-,1821,donnyworld,donnyworld
-,1822,es-elmd,es-elmd
-,1823,unisys-lm,Unisys Natural Language License Manager
-,1824,metrics-pas,metrics-pas
-,1901,fjicl-tep-a,Fujitsu ICL Terminal Emulator Program A
-,1902,fjicl-tep-b,Fujitsu ICL Terminal Emulator Program B
-,1903,linkname,Local Link Name Resolution
-,1904,fjicl-tep-c,Fujitsu ICL Terminal Emulator Program C
-,1905,sugp,Secure UP.Link Gateway Protocol
-,1906,tpmd,TPortMapperReq
-,1907,intrastar,IntraSTAR
-,1908,dawn,Dawn
-,1909,global-wlink,Global World Link
-,1911,mtp,Starlight Networks Multimedia Transport Protocol
-,1912,?,Unassigned
-,1913,armadp,armadp
-,1914,elm-momentum,Elm-Momentum
-,1915,facelink,FACELINK
-,1916,persoft,Persoft Persona
-,1917,noagent,nOAgent
-,1918,can-nds,Candle Directory Service - NDS
-,1919,can-dch,Candle Directory Service - DCH
-,1920,can-ferret,Candle Directory Service - FERRET
-,1944,close-combat,close-combat
-,1945,dialogic-elmd,dialogic-elmd
-,1946,tekpls,tekpls
-,1947,hlserver,hlserver
-,1948,eye2eye,eye2eye
-,1949,ismaeasdaqlive,ISMA Easdaq Live
-,1950,ismaeasdaqtest,ISMA Easdaq Test
-,1951,bcs-lmserver,bcs-lmserver
-,1973,dlsrap,Data Link Switching Remote Access Protocol
-,1985,foliocorp,Folio Remote Server
-,1986,licensedaemon,cisco license management
-,1987,tr-rsrb-p1,cisco RSRB Priority 1 port
-,1988,tr-rsrb-p2,cisco RSRB Priority 2 port
-,1989,tr-rsrb-p3,cisco RSRB Priority 3 port
-,1990,stun-p1,cisco STUN Priority 1 port
-,1991,stun-p2,cisco STUN Priority 2 port
-,1992,stun-p3,cisco STUN Priority 3 port
-,1993,snmp-tcp-port,cisco SNMP TCP port
-,1994,stun-port,cisco serial tunnel port
-,1995,perf-port,cisco perf port
-,1996,tr-rsrb-port,cisco Remote SRB port
-,1997,gdp-port,cisco Gateway Discovery Protocol
-,1998,x25-svc-port,cisco X.25 service (XOT)
-,1999,tcp-id-port,cisco identification port
-,2000,callbook,?
-,2001,dc,?
-,2002,globe,?
-,2004,mailbox,?
-,2005,berknet,?
-,2006,invokator,?
-,2007,dectalk,?
-,2008,conf,?
-,2009,news,n
-,2010,search,?
-,2011,raid-cc,raid
-,2012,ttyinfo,?
-,2013,raid-am,?
-,2014,troff,?
-,2015,cypress,?
-,2016,bootserver,?
-,2017,cypress-stat,?
-,2018,terminaldb,?
-,2019,whosockami,?
-,2020,xinupageserver,?
-,2021,servexec,?
-,2022,down,?
-,2023,xinuexpansion3,?
-,2024,xinuexpansion4,?
-,2025,ellpack,?
-,2026,scrabble,?
-,2027,shadowserver,?
-,2028,submitserver,?
-,2030,device2,?
-,2032,blackboard,?
-,2033,glogger,?
-,2034,scoremgr,?
-,2035,imsldoc,?
-,2038,objectmanager,?
-,2040,lam,?
-,2041,interbase,?
-,2042,isis,isis
-,2043,isis-bcast,isis-bcast
-,2044,rimsl,?
-,2045,cdfunc,?
-,2046,sdfunc,?
-,2047,dls,?
-,2048,dls-monitor,?
-,2049,shilp,?
-,2065,dlsrpn,Data Link Switch Read Port Number
-,2067,dlswpn,Data Link Switch Write Port Number
-,2102,zephyr-srv,Zephyr server
-,2103,zephyr-clt,Zephyr serv-hm connection
-,2104,zephyr-hm,Zephyr hostmanager
-,2105,minipay,MiniPay
-,2201,ats,Advanced Training System Program
-,2202,imtc-map,Int. Multimedia Teleconferencing Cosortium
-,2213,kali,Kali
-,2221,unreg-ab1,Allen-Bradley unregistered port
-,2222,unreg-ab2,Allen-Bradley unregistered port
-,2223,inreg-ab3,Allen-Bradley unregistered port
-,2232,ivs-video,IVS Video default
-,2233,infocrypt,INFOCRYPT
-,2234,directplay,DirectPlay
-,2235,sercomm-wlink,Sercomm-WLink
-,2236,nani,Nani
-,2237,optech-port1-lm,Optech Port1 License Manager
-,2238,aviva-sna,AVIVA SNA SERVER
-,2239,imagequery,Image Query
-,2241,ivsd,IVS Daemon
-,2279,xmquery,xmquery
-,2280,lnvpoller,LNVPOLLER
-,2281,lnvconsole,LNVCONSOLE
-,2282,lnvalarm,LNVALARM
-,2283,lnvstatus,LNVSTATUS
-,2284,lnvmaps,LNVMAPS
-,2285,lnvmailmon,LNVMAILMON
-,2286,nas-metering,NAS-Metering
-,2287,dna,DNA
-,2288,netml,NETML
-,2307,pehelp,pehelp
-,2401,cvspserver,cvspserver
-,2500,rtsserv,Resource Tracking system server
-,2501,rtsclient,Resource Tracking system client
-,2564,hp-3000-telnet,HP 3000 NS/VT block mode telnet
-,2592,netrek,netrek
-,2700,tqdata,tqdata
-,2784,www-dev,world wide web - development
-,2785,aic-np,aic-np
-,2786,aic-oncrpc,aic-oncrpc - Destiny MCD database
-,2787,piccolo,piccolo - Cornerstone Software
-,2788,fryeserv,NetWare Loadable Module - Seagate Software
-,2789,media-agent,Media Agent
-,2908,mao,mao
-,2909,funk-dialout,Funk Dialout
-,2910,tdaccess,TDAccess
-,2911,blockade,Blockade
-,2912,epicon,Epicon
-,3000,hbci,HBCI
-,3001,redwood-broker,Redwood Broker
-,3002,exlm-agent,EXLM Agent
-,3010,gw,Telerate Workstation
-,3011,trusted-web,Trusted Web
-,3047,hlserver,Fast Security HL Server
-,3048,pctrader,Sierra Net PC Trader
-,3049,NSWS,?
-,3141,vmodem,VMODEM
-,3142,rdc-wh-eos,RDC WH EOS
-,3143,seaview,Sea View
-,3144,tarantella,Tarantella
-,3145,csi-lfap,CSI-LFAP
-,3264,ccmail,cc:mail/lotus
-,3333,dec-notes,DEC Notes
+,3389,Terminal,WIN2000 Terminal Server
-,3421,bmap,Bull Apprise portmapper
-,3454,mira,Apple Remote Access Protocol
-,3455,prsvp,RSVP Port
-,3456,vat,VAT default data
-,3457,vat-control,VAT default control
-,3900,udt_os,Unidata UDT OS
-,3984,mapper-nodemgr,MAPPER network node manager
-,3985,mapper-mapethd,MAPPER TCP/IP server
-,3986,mapper-ws_ethd,MAPPER workstation server
-,4000,OICQ,OICQ Client
-,4008,netcheque,NetCheque accounting
-,4009,chimera-hwm,Chimera HWM
-,4132,nuts_dem,NUTS Daemon
-,4133,nuts_bootp,NUTS Bootp Server
-,4134,nifty-hmi,NIFTY-Serve HMI protocol
-,4321,rwhois,Remote Who Is
-,4343,unicall,UNICALL
-,4444,krb524,KRB524
-,4445,upnotifyp,UPNOTIFYP
-,4446,n1-fwp,N1-FWP
-,4447,n1-rmgmt,N1-RMGMT
-,4448,asc-slmd,ASC Licence Manager
-,4449,arcryptoip,ARCrypto IP
-,4450,camp,Camp
-,4451,ctisystemmsg,CTI System Msg
-,4452,ctiprogramload,CTI Program Load
-,4453,nssalertmgr,NSS Alert Manager
-,4454,nssagentmgr,NSS Agent Manager
-,4500,sae-urn,sae-urn
-,4501,urn-x-cdchoice,urn-x-cdchoice
-,4672,rfa,remote file access server
-,5000,commplex-main,?
-,5001,commplex-link,?
-,5002,rfe,radio free ethernet
-,5003,claris-fmpro,Claris FileMaker Pro
-,5004,avt-profile-1,avt-profile-1
-,5005,avt-profile-2,avt-profile-2
-,5010,telelpathstart,TelepathStart
-,5011,telelpathattack,TelepathAttack
-,5020,zenginkyo-1,zenginkyo-1
-,5021,zenginkyo-2,zenginkyo-2
-,5050,mmcc,multimedia conference control tool
-,5145,rmonitor_secure,?
-,5150,atmp,Ascend Tunnel Management Protocol
-,5190,aol,America-Online
-,5191,aol-1,AmericaOnline1
-,5192,aol-2,AmericaOnline2
-,5193,aol-3,AmericaOnline3
-,5236,padl2sim,?
-,5300,hacl-hb,# HA cluster heartbeat
-,5301,hacl-gs,# HA cluster general services
-,5302,hacl-cfg,# HA cluster configuration
-,5303,hacl-probe,# HA cluster probing
-,5304,hacl-local,# HA Cluster Commands
-,5305,hacl-test,# HA Cluster Test
-,5400,excerpt,Excerpt Search
-,5401,excerpts,Excerpt Search Secure
-,5555,personal-agent,Personal Agent
-,5631,pcanywheredata,pcANYWHEREdata
-,5632,pcanywherestat,pcANYWHEREstat
-,5678,rrac,Remote Replication Agent Connection
-,5679,dccm,Direct Cable Connect Manager
-,5713,proshareaudio,proshare conf audio
-,5714,prosharevideo,proshare conf video
-,5715,prosharedata,proshare conf data
-,5716,prosharerequest,proshare conf request
-,5717,prosharenotify,proshare conf notify
-,5729,openmail,Openmail User Agent Layer
-,5745,fcopy-server,fcopy-server
-,5755,openmailg,OpenMail Desk Gateway server
-,5757,x500ms,OpenMail X.500 Directory Server
-,5766,openmailns,OpenMail NewMail Server
-,5767,s-openmail,OpenMail Suer Agent Layer (Secure)
-,5800,VNC,Virtual Network Computing server
-,5900,VNC,Virtual Network Computing server
-,6000,x11,-6063 X Window System
-,6110,softcm,HP SoftBench CM
-,6111,spc,HP SoftBench Sub-Process Control
-,6112,dtspcd,dtspcd
-,6123,backup-express,Backup Express
-,6141,meta-corp,Meta Corporation License Manager
-,6142,aspentec-lm,Aspen Technology License Manager
-,6143,watershed-lm,Watershed License Manager
-,6144,statsci1-lm,StatSci License Manager - 1
-,6145,statsci2-lm,StatSci License Manager - 2
-,6146,lonewolf-lm,Lone Wolf Systems License Manager
-,6147,montage-lm,Montage License Manager
-,6148,ricardo-lm,Ricardo North America License Manager
-,6149,tal-pod,tal-pod
-,6253,crip,CRIP
-,6389,clariion-evr01,clariion-evr01
-,6455,skip-cert-recv,SKIP Certificate Receive
-,6456,skip-cert-send,SKIP Certificate Send
-,6558,xdsxdm,?
-,6670,vocaltec-gold,Vocaltec Global Online Directory
-,6672,vision_server,vision_server
-,6673,vision_elmd,vision_elmd
-,6831,ambit-lm,ambit-lm
-,6969,acmsoda,acmsoda
-,7000,afs3-fileserver,file server itself
-,7001,afs3-callback,callbacks to cache managers
-,7002,afs3-prserver,users & groups database
-,7003,afs3-vlserver,volume location database
-,7004,afs3-kaserver,AFS/Kerberos authentication service
-,7005,afs3-volser,volume managment server
-,7006,afs3-errors,error interpretation service
-,7007,afs3-bos,basic overseer process
-,7008,afs3-update,server-to-server updater
-,7009,afs3-rmtsys,remote cache manager service
-,7010,ups-onlinet,onlinet uninterruptable power supplies
-,7099,lazy-ptop,lazy-ptop
-,7100,font-service,X Font Service
-,7121,virprot-lm,Virtual Prototypes License Manager
-,7174,clutild,Clutild
-,7200,fodms,FODMS FLIP
-,7201,dlip,DLIP
-,7306,Trojan,NetMonitor (NetSpy)
-,7395,winqedit,winqedit
-,7491,telops-lmd,telops-lmd
-,7511,pafec-lm,pafec-lm
-,7626,Trojan,BingHe
-,7777,cbt,cbt
-,7781,accu-lmgr,accu-lmgr
-,7999,irdmi2,iRDMI2
-,8000,OICQ,OICQ Server
-,8010,wingate-logfile,Wingate web logfile
-,8011,Trojan,Way
-,8032,pro-ed,ProEd
+,8080,WWW-Proxy,Standard HTTP Proxy
-,8450,npmp,npmp
-,8888,ddi-tcp-1,NewsEDGE server TCP (TCP 1)
-,8889,ddi-tcp-2,Desktop Data TCP 1
-,8890,ddi-tcp-3,Desktop Data TCP 2
-,8891,ddi-tcp-4,Desktop Data TCP 3: NESS application
-,8892,ddi-tcp-5,Desktop Data TCP 4: FARM product
-,8893,ddi-tcp-6,Desktop Data TCP 5: NewsEDGE/Web application
-,8894,ddi-tcp-7,Desktop Data TCP 6: COAL application
-,9000,cslistener,CSlistener
-,9100,JetDirect,HP JetDirect Printer Server
-,9535,man,?
-,9876,sd,Session Director
-,9992,palace,Palace
-,9993,palace,Palace
-,9994,palace,Palace
-,9995,palace,Palace
-,9996,palace,Palace
-,9997,palace,Palace
-,9998,distinct32,Distinct32
-,9999,distinct,distinct
-,10000,ndmp,Network Data Management Protocol
-,12345,Netbus,Win95/NT Netbus backdoor
-,12753,tsaf,tsaf port
-,17007,isode-dua,?
-,18000,biimenu,Beckman Instruments
-,20000,Trojan,Millenium II (GirlFriend)
-,21554,Trojan,GirlFriend
-,21845,webphone,webphone
-,21846,netspeak-is,NetSpeak Corp. Directory Services
-,21847,netspeak-cs,NetSpeak Corp. Connection Services
-,21848,netspeak-acd,NetSpeak Corp. Automatic Call Distribution
-,21849,netspeak-cps,NetSpeak Corp. Credit Processing System
-,22273,wnn6,wnn6
-,22555,vocaltec-wconf,Vocaltec Web Conference
-,22800,aws-brf,Telerate Information Platform LAN
-,22951,brf-gw,Telerate Information Platform WAN
-,25000,icl-twobase1,icl-twobase1
-,25001,icl-twobase2,icl-twobase2
-,25002,icl-twobase3,icl-twobase3
-,25003,icl-twobase4,icl-twobase4
-,25004,icl-twobase5,icl-twobase5
-,25005,icl-twobase6,icl-twobase6
-,25006,icl-twobase7,icl-twobase7
-,25007,icl-twobase8,icl-twobase8
-,25008,icl-twobase9,icl-twobase9
-,25009,icl-twobase10,icl-twobase10
-,25793,vocaltec-hos,Vocaltec Address Server
-,25867,WebCam32,WebCam32 Admin
-,26000,quake,quake
-,26208,wnn6-ds,wnn6-ds
-,27374,Trojan,Sub Seven 2.0+
-,47557,dbbrowse,Databeam Corporation
-,47806,ap,ALC Protocol
-,47808,bacnet,Building Automation and Control Networks
-,54320,Trojan,Back Orifice 2000
论坛插件加载方法
发帖求助前要善用【论坛搜索】功能,那里可能会有你要找的答案;
如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【D豆】,加分不会扣除自己的积分,做一个热心并受欢迎的人!
回复 支持 反对

使用道具 举报

已领礼包: 593个

财富等级: 财运亨通

 楼主| 发表于 2004-5-3 00:04:21 | 显示全部楼层
重要端口大全加说明
注意:由于一些应用软件占用了部分端口,因此此文件中的部分端口被注释掉了(注释的字符为://)。


TCP 2=Death
TCP 7=Echo
TCP 12=Bomber
TCP 20=FTP Data
TCP 21=Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrash
TCP 23=Telnet, Tiny Telnet Server (= TTS)
TCP 25=SMTP, Ajan, Antigen, Email Password Sender, Happy 99, Kuang2,ProMail trojan, Shtrilitz, Stealth, Tapiras, Terminator, WinPC, WinSpy,Haebu Coceda
TCP 31=Agent 31, Hackers Paradise, Masters Paradise
TCP 41=DeepThroat
TCP 43=WHOIS
TCP 48=DRAT
TCP 50=DRAT
TCP 53=DNS,Bonk (DOS Exploit)
TCP 58=DMSetup
TCP 59=DMSetup
TCP 70=Gopher
TCP 79=Firehotcker, Finger
TCP 80=Http服务器, Executor, RingZero
TCP 81=Chubo
TCP 99=Hidden Port
TCP 110=Pop3服务器, ProMail
TCP 113=Kazimas, Auther Idnet
TCP 118=Infector 1.4.2
TCP 119=Nntp, Happy 99
TCP 121=JammerKiller, Bo jammerkillah
TCP 123=Net Controller
TCP 133=Infector 1.x
//TCP 137=NetBios-NS
//TCP 138=NetBios-DGN
//TCP 139=NetBios-SSN
TCP 143=IMAP
TCP 146=FC Infector,Infector
TCP 161=Snmp
TCP 162=Snmp-Trap
TCP 170=A-Trojan
TCP 194=Irc
TCP 256=Nirvana
TCP 315=The Invasor
TCP 420=Breach
TCP 421=TCP Wrappers
TCP 456=Hackers paradise,FuseSpark
TCP 531=Rasmin
TCP 555=Ini-Killer,Phase Zero,Stealth Spy
TCP 605=SecretService
TCP 606=Noknok8
TCP 661=Noknok8
TCP 666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection
Inside 1.2
TCP 667=Noknok7.2
TCP 668=Noknok6
TCP 692=GayOL
TCP 777=AIM Spy
TCP 808=RemoteControl,WinHole
TCP 815=Everyone Darling
TCP 911=Dark Shadow
TCP 999=DeepThroat
TCP 1000=Der Spaeher
TCP 1001=Silencer,WebEx,Der Spaeher
TCP 1003=BackDoor
TCP 1010=Doly
TCP 1011=Doly
TCP 1012=Doly
TCP 1015=Doly
TCP 1020=Vampire
TCP 1024=NetSpy.698(YAI)
//TCP 1025=NetSpy.698
//TCP 1033=Netspy
//TCP 1042=Bla
//TCP 1045=Rasmin
//TCP 1047=GateCrasher
//TCP 1050=MiniCommand
TCP 1080=Wingate
//TCP 1090=Xtreme, VDOLive
//TCP 1095=Rat
//TCP 1097=Rat
//TCP 1098=Rat
//TCP 1099=Rat
//TCP 1170=Psyber Stream Server,Streaming Audio trojan,Voice
//TCP 1200=NoBackO
//TCP 1201=NoBackO


*****
//TCP 1207=Softwar
//TCP 1212=Nirvana,Visul Killer
//TCP 1234=Ultors
//TCP 1243=BackDoor-G, SubSeven, SubSeven Apocalypse
//TCP 1245=VooDoo Doll
//TCP 1269=Mavericks Matrix
//TCP 1313=Nirvana
//TCP 1349=BioNet
//TCP 1441=Remote Storm
//TCP 1492=FTP99CMP(BackOriffice.FTP)
//TCP 1509=Psyber Streaming Server
//TCP 1600=Shivka-Burka
//TCP 1703=Exloiter 1.1
//TCP 1807=SpySender
//TCP 1966=Fake FTP 2000
//TCP 1976=Custom port
//TCP 1981=Shockrave
//TCP 1999=BackDoor, TransScout
//TCP 2000=Der Spaeher,INsane Network
//TCP 2001=Transmisson scout
//TCP 2002=Transmisson scout
//TCP 2003=Transmisson scout
//TCP 2004=Transmisson scout
//TCP 2005=TTransmisson scout
//TCP 2023=Ripper,Pass Ripper,Hack City Ripper Pro
//TCP 2115=Bugs
//TCP 2121=Nirvana
//TCP 2140=Deep Throat, The Invasor
//TCP 2155=Nirvana
//TCP 2208=RuX
//TCP 2255=Illusion Mailer
//TCP 2283=HVL Rat5
//TCP 2300=PC Explorer
//TCP 2311=Studio54
//TCP 2565=Striker
//TCP 2583=WinCrash
//TCP 2600=Digital RootBeer
//TCP 2716=Prayer Trojan
//TCP 2801=Phineas Phucker
//TCP 2989=Rat
//TCP 3024=WinCrash trojan
//TCP 3128=RingZero
//TCP 3129=Masters Paradise
//TCP 3150=Deep Throat, The Invasor
//TCP 3210=SchoolBus
//TCP 3456=Terror
//TCP 3459=Eclipse 2000
//TCP 3700=Portal of Doom
//TCP 3791=Eclypse
//TCP 3801=Eclypse
TCP 4000=腾讯OICQ客户端
TCP 4092=WinCrash
TCP 4242=VHM
TCP 4321=BoBo
TCP 4444=Prosiak,Swift remote
TCP 4567=File Nail
TCP 4590=ICQTrojan
TCP 4950=ICQTrojan
TCP 5000=WindowsXP服务器,Blazer 5,Bubbel,Back Door Setup,Sockets de Troie
TCP 5001=Back Door Setup, Sockets de Troie
TCP 5011=One of the Last Trojans (OOTLT)
TCP 5031=Firehotcker,Metropolitan,NetMetro
TCP 5032=Metropolitan
TCP 5190=ICQ Query
TCP 5321=Firehotcker
TCP 5333=Backage Trojan Box 3
TCP 5343=WCrat
TCP 5400=Blade Runner, BackConstruction1.2
TCP 5401=Blade Runner,Back Construction
TCP 5402=Blade Runner,Back Construction
TCP 5471=WinCrash
TCP 5521=Illusion Mailer
TCP 5550=Xtcp,INsane Network
TCP 5555=ServeMe
TCP 5556=BO Facil
TCP 5557=BO Facil
TCP 5569=Robo-Hack
TCP 5598=BackDoor 2.03
TCP 5631=PCAnyWhere data
TCP 5637=PC Crasher
TCP 5638=PC Crasher
TCP 5698=BackDoor
TCP 5714=Wincrash3
TCP 5741=WinCrash3
TCP 5742=WinCrash
TCP 5881=Y3K RAT
TCP 5882=Y3K RAT
TCP 5888=Y3K RAT
TCP 5889=Y3K RAT
TCP 6000=Backdoor.AB
TCP 6006=Noknok8
TCP 6272=SecretService
TCP 6267=广外女生
TCP 6400=Backdoor.AB,The Thing
TCP 6500=Devil 1.03
TCP 6661=Teman
TCP 6666=TCPshell.c
TCP 6667=NT Remote Control
TCP 6669=Vampyre
TCP 6670=DeepThroat
TCP 6711=SubSeven
TCP 6712=SubSeven1.x
TCP 6713=SubSeven
TCP 6723=Mstream
TCP 6767=NT Remote Control
TCP 6771=DeepThroat
TCP 6776=BackDoor-G,SubSeven,2000 Cracks
TCP 6789=Doly Trojan
TCP 6838=Mstream
TCP 6883=DeltaSource
TCP 6912=Shit Heep
TCP 6939=Indoctrination
TCP 6969=GateCrasher, Priority, IRC 3
TCP 6970=GateCrasher
TCP 7000=Remote Grab,NetMonitor,SubSeven1.x
TCP 7001=Freak88
TCP 7201=NetMonitor
TCP 7215=BackDoor-G, SubSeven
TCP 7001=Freak88,Freak2k
TCP 7300=NetMonitor
TCP 7301=NetMonitor
TCP 7306=NetMonitor
TCP 7307=NetMonitor, ProcSpy
TCP 7308=NetMonitor, X Spy
TCP 7323=Sygate服务器端
TCP 7424=Host Control
TCP 7597=Qaz
TCP 7609=Snid X2
TCP 7626=冰河
TCP 7777=The Thing
TCP 7789=Back Door Setup, ICQKiller
TCP 7983=Mstream
TCP 8000=XDMA, 腾讯OICQ服务器端
TCP 8010=Logfile
TCP 8080=WWW 代理,Ring Zero,Chubo
TCP 8787=BackOfrice 2000
TCP 8897=Hack Office,Armageddon
TCP 8989=Recon
TCP 9000=Netministrator
TCP 9325=Mstream
TCP 9400=InCommand
TCP 9401=InCommand
TCP 9402=InCommand
TCP 9872=Portal of Doom
TCP 9873=Portal of Doom
TCP 9874=Portal of Doom
TCP 9875=Portal of Doom
TCP 9876=Cyber Attacker
TCP 9878=TransScout
TCP 9989=Ini-Killer
TCP 9999=Prayer Trojan
TCP 10067=Portal of Doom
TCP 10084=Syphillis
TCP 10085=Syphillis
TCP 10086=Syphillis
TCP 10101=BrainSpy
TCP 10167=Portal Of Doom
TCP 10520=Acid Shivers
TCP 10607=Coma trojan
TCP 10666=Ambush
TCP 11000=Senna Spy
TCP 11050=Host Control
TCP 11051=Host Control
TCP 11223=Progenic,Hack \'99KeyLogger
TCP 11831=TROJ_LATINUS.SVR
TCP 12076=Gjamer, MSH.104b
TCP 12223=Hack?9 KeyLogger
TCP 12345=GabanBus, NetBus, Pie Bill Gates, X-bill
TCP 12346=GabanBus, NetBus, X-bill
TCP 12349=BioNet
TCP 12361=Whack-a-mole
TCP 12362=Whack-a-mole
TCP 12378=W32/Gibe@MM
TCP 12456=NetBus
TCP 12623=DUN Control
TCP 12624=Buttman
TCP 12631=WhackJob, WhackJob.NB1.7
TCP 12701=Eclipse2000
TCP 12754=Mstream
TCP 13000=Senna Spy
TCP 13010=Hacker Brazil
TCP 13013=Psychward
TCP 13700=Kuang2 The Virus
TCP 14456=Solero
TCP 14500=PC Invader
TCP 14501=PC Invader
TCP 14502=PC Invader
TCP 14503=PC Invader
TCP 15000=NetDaemon 1.0
TCP 15092=Host Control
TCP 15104=Mstream
TCP 16484=Mosucker
TCP 16660=Stacheldraht (DDoS)
TCP 16772=ICQ Revenge
TCP 16969=Priority
TCP 17166=Mosaic
TCP 17300=Kuang2 The Virus
TCP 17490=CrazyNet
TCP 17500=CrazyNet
TCP 17569=Infector 1.4.x + 1.6.x
TCP 17777=Nephron
TCP 18753=Shaft (DDoS)
TCP 19864=ICQ Revenge
TCP 20000=Millennium II (GrilFriend)
TCP 20001=Millennium II (GrilFriend)
TCP 20002=AcidkoR
TCP 20034=NetBus 2 Pro
TCP 20203=Logged,Chupacabra
TCP 20331=Bla
TCP 20432=Shaft (DDoS)
TCP 21544=Schwindler 1.82,GirlFriend
TCP 21554=Schwindler 1.82,GirlFriend,Exloiter 1.0.1.2
TCP 22222=Prosiak,RuX Uploader 2.0
TCP 22784=Backdoor.Intruzzo
TCP 23432=Asylum 0.1.3
TCP 23456=Evil FTP, Ugly FTP, WhackJob
TCP 23476=Donald Dick
TCP 23477=Donald Dick
TCP 23777=INet Spy
TCP 26274=Delta
TCP 26681=Spy Voice
TCP 27374=Sub Seven 2.0+
TCP 27444=Tribal Flood Network,Trinoo
TCP 27665=Tribal Flood Network,Trinoo
TCP 29431=Hack Attack
TCP 29432=Hack Attack
TCP 29104=Host Control
TCP 29559=TROJ_LATINUS.SVR
TCP 29891=The Unexplained
TCP 30001=Terr0r32
TCP 30003=Death,Lamers Death
TCP 30029=AOL trojan
TCP 30100=NetSphere 1.27a,NetSphere 1.31
TCP 30101=NetSphere 1.31,NetSphere 1.27a
TCP 30102=NetSphere 1.27a,NetSphere 1.31
TCP 30103=NetSphere 1.31
TCP NetSphere Final
TCP 30303=Sockets de Troie
TCP 30947=Intruse
TCP 30999=Kuang2
TCP 21335=Tribal Flood Network,Trinoo
TCP 31336=Bo Whack
TCP 31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back
Orifice,DeepBO,Freak2k,NetSpy
TCP 31338=NetSpy,Back Orifice,DeepBO
TCP 31339=NetSpy DK
TCP 31554=Schwindler
TCP 31666=BOWhack
TCP 31778=Hack Attack
TCP 31785=Hack Attack
TCP 31787=Hack Attack
TCP 31789=Hack Attack
TCP 31791=Hack Attack
TCP 31792=Hack Attack
TCP 32100=PeanutBrittle
TCP 32418=Acid Battery
TCP 33333=Prosiak,Blakharaz 1.0
TCP 33577=Son Of Psychward
TCP 33777=Son Of Psychward
TCP 33911=Spirit 2001a
TCP 34324=BigGluck,TN,Tiny Telnet Server
TCP 34555=Trin00 (Windows) (DDoS)
TCP 35555=Trin00 (Windows) (DDoS)
TCP 37651=YAT
TCP 40412=The Spy
TCP 40421=Agent 40421,Masters Paradise.96
TCP 40422=Masters Paradise
TCP 40423=Masters Paradise.97
TCP 40425=Masters Paradise
TCP 40426=Masters Paradise 3.x
TCP 41666=Remote Boot
TCP 43210=Schoolbus 1.6/2.0
TCP 44444=Delta Source
TCP 47252=Prosiak
TCP 47262=Delta
TCP 47878=BirdSpy2
TCP 49301=Online Keylogger
TCP 50505=Sockets de Troie
TCP 50766=Fore, Schwindler
TCP 51966=CafeIni
TCP 53001=Remote Windows Shutdown
TCP 53217=Acid Battery 2000
TCP 54283=Back Door-G, Sub7
TCP 54320=Back Orifice 2000,Sheep
TCP 54321=School Bus .69-1.11,Sheep, BO2K
TCP 57341=NetRaider
TCP 58339=ButtFunnel
TCP 60000=Deep Throat
TCP 60068=Xzip 6000068
TCP 60411=Connection
TCP 60606=TROJ_BCKDOR.G2.A
TCP 61466=Telecommando
TCP 61603=Bunker-kill
TCP 63485=Bunker-kill
TCP 65000=Devil, DDoS
TCP 65432=Th3tr41t0r, The Traitor
TCP 65530=TROJ_WINMITE.10
TCP 65535=RC
TCP 69123=ShitHeep
TCP 88798=Armageddon,Hack Office
UDP 1349=BO dll
UDP 2989=RAT
UDP 3801=Eclypse
UDP 10067=Portal of Doom
UDP 10167=Portal of Doom
UDP 12378=W32/Gibe@MM
UDP 22784=Backdoor.Intruzzo
UDP 26274=Delta Source
UDP 29891=The Unexplained
UDP 31337=Baron Night, BO client, BO2, Bo Facil, BackFire, Back Orifice,
DeepBO
UDP 31338=Back Orifice, NetSpy DK, DeepBO
UDP 31789=Hack aTack
UDP 31791=Hack aTack
UDP 47262=Delta Source
UDP 54321=Back Orifice 2000
论坛插件加载方法
发帖求助前要善用【论坛搜索】功能,那里可能会有你要找的答案;
如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【D豆】,加分不会扣除自己的积分,做一个热心并受欢迎的人!
回复 支持 反对

使用道具 举报

发表于 2004-5-3 00:40:46 | 显示全部楼层
7626是冰河,这个我就清楚,中过,哈哈
论坛插件加载方法
发帖求助前要善用【论坛搜索】功能,那里可能会有你要找的答案;
如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【D豆】,加分不会扣除自己的积分,做一个热心并受欢迎的人!
回复 支持 反对

使用道具 举报

发表于 2004-5-3 00:46:14 | 显示全部楼层
呵呵,补充几个。27015,27016,27017是游戏半条命用的,27000是比赛转播用的。
论坛插件加载方法
发帖求助前要善用【论坛搜索】功能,那里可能会有你要找的答案;
如果你在论坛求助问题,并且已经从坛友或者管理的回复中解决了问题,请把帖子标题加上【已解决】;
如何回报帮助你解决问题的坛友,一个好办法就是给对方加【D豆】,加分不会扣除自己的积分,做一个热心并受欢迎的人!
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|申请友链|Archiver|手机版|小黑屋|辽公网安备|晓东CAD家园 ( 辽ICP备15016793号 )

GMT+8, 2025-10-15 06:54 , Processed in 0.524625 second(s), 40 queries , Gzip On.

Powered by Discuz! X3.5

© 2001-2025 Discuz! Team.

快速回复 返回顶部 返回列表