Check out http://www.isi.edu/in-notes/iana/assignments/port-numbers
Here is a sample:
cisco-fna 130/tcp cisco FNATIVE
cisco-fna 130/udp cisco FNATIVE
cisco-tna 131/tcp cisco TNATIVE
cisco-tna 131/udp cisco TNATIVE
cisco-sys 132/tcp cisco SYSMAINT
cisco-sys 132/udp cisco SYSMAINT
Now go to Cisco's site and look for FNATIVE and you get :
http://www-search.cisco.com/pcgi-bin/search/public.pl?q=FNATIVE&sa=Go&num=10&searchselector=0
To find they are for Cisco Proprietary Protocols use on Cisco Catalyst 6000
Network Analysis Modules.
---K
Talisker wrote:
> James
>
> More info needed, I take you are being scanned on these ports, if so is it
> just these or are there more. Anyway here's what I found, there's not much.
> :o)
>
> There's some info here, it's an RMON id document from the RMON MIB working
> group, look for cisco-fna PROTOCOL-IDENTIFIER
> http://www.ietf.org/proceedings/99mar/I-D/draft-ietf-rmonmib-rmonprot-mac-00
> .txt
>
> There may a clue to malicious intent in this guide to harmless hacking.
> they may just be probing for routers or specifically cisco routers
> http://www.antionline.com/archives/text/gtmhh/vol3.html
>
> Take Care
>
> Andy
>
> www.networkintrusion.co.uk
> '''
> (0 0)
> ----oOO----(_)----------
> | The geek shall |
> | Inherit the earth |
> -----------------oOO----
> |__|__|
> || ||
> ooO Ooo
>
> The opinions contained within this transmission are entirely my own, and do
> not necessarily reflect those of my employer.
>
> ----- Original Message -----
> From: "Hackett, James" <James.Hackett_at_CWCOM.CO.UK>
> To: <INCIDENTS_at_securityfocus.com>
> Sent: Thursday, August 03, 2000 2:51 PM
> Subject: Assistance on these ports ranges ??
>
> > Hi,
> >
> > Does any one have any knowledge or uses for these ports as i have asked
> > Cisco
> > on many occations and uninformative replys back stating " it must be in
> the
> > RFC's"
> > searched the cisco web site and checked all RFC to no avail. Maybe Cisco
> > just does
> > not use them anymore as they are very low down in the port number
> sequence.
> > Could of
> > being used on old legacy equipment ??????
> >
> > Any pointers to enlighten me be most grateful
> >
> >
> > 130/tcp cisco FNATIVE cisco-fna
> > 130/udp cisco FNATIVE cisco-fna
> > 131/tcp cisco TNATIVE cisco-tna
> > 131/udp cisco TNATIVE cisco-tna
> > 132/tcp cisco SYSMAINT cisco-sys
> > 132/udp cisco SYSMAINT cisco-sys
> >
> >
> > James Hackett
> > Senior Security Analyst
> > email: James.Hackett_at_cwcom.co.uk
> >
> >
> >
> >
> > **********************************************************************
> > This message may contain information which is confidential or privileged.
> > If you are not the intended recipient, please advise the sender
> immediately
> > by reply e-mail and delete this message and any attachments
> > without retaining a copy.
> >
> > **********************************************************************
> >
> >
Received on Aug 07 2000
Intro
