Suspicious ports open on 4500 switch

Unanswered Question
Jun 9th, 2008
User Badges:


For some reason, these ports are open on one of our 4500. We don't control the WAN here, and this switch is hooked to the router. Any ideas why these are open?

udp 0 0 *.2347

udp 0 0 *.2345

udp 0 0 *.2228

udp 0 0 *.49608


have this too:


sh netstat udp:

464674 no such ports


sh netstat tcp:

301 embryonic connections dropped


Thanks for any insight.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Farrukh Haroon Mon, 06/09/2008 - 12:53
User Badges:
  • Red, 2250 points or more

What modules do you have on this switch? Can you post output of 'show ip sockets'.


udp 0 0 *.49608 seems to be RTP ports. (VOIP)


Regards


Farrukh

laamidd2003 Tue, 06/10/2008 - 03:35
User Badges:

I don't have enable rights to the switch.


There isn't any VoIP at this office.


#sh ip sockets

Show ip commands:

------------------

show ip alias

show ip dns

show ip route

show ip http


sh ver

WS-C4506 Software, Version NmpSW: 7.6(6)


#sh mod

Mod Slot Ports Module-Type Model Sub Status

--- ---- ----- ------------------------- ------------------- --- --------

1 1 2 1000BaseX Supervisor WS-X4013 no ok

2 2 48 Inline Power Module WS-X4148-RJ45V no ok

3 3 48 Inline Power Module WS-X4148-RJ45V no ok

4 4 48 Inline Power Module WS-X4148-RJ45V no ok



Thanks,

Bob

Actions

This Discussion