To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

(unknown) software under firewall activity tab

Options
Jukkisfd
Jukkisfd W/ Alumni Posts: 1 Security Scout

Hi,

 

I just noticed i have 2 (unknown) software listening on port 1900 UDP and 6771 UDP according to firewall activity tab.

Is there any way to know what those (unknown) software are and why they are shown as (unknown) instead of real name?

I am using Client Security 10.

Comments

  • Ben
    Ben W/ Alumni Posts: 664 Cybercrime Crusader
    Options

    Hello Jukkisfd,


    In order to find out which process is using a given port enter the command line:

    C:\>netstat -aon | findstr :1900

    C:\>netstat -aon | findstr :6771

    You should get a similar output as the following :

    UDP 0.0.0.0:1900 0.0.0.0:0 LISTENING XX

    You'll get all the process using the given port and its ID (last column).
    Enter now the following command:

    C:\>tasklist | findstr XX


    In addition the following tool will allow you to see all the processes running on your machine and their dependencies
    http://www.microsoft.com/france/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

    Finally from a quick search, port 1900 UDP seems to be officially used by Microsoft SSDP Enables discovery of UPnP devices and port 6771 UDP used  unofficially by Polycom server broadcast.

    Hope that helps you.

     

    Cheers.

This discussion has been closed.