Re: Port Zero

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Looks to me like it's not set.  Because there's no active connection,
there's no foreign address.

A socket that's listening won't have a foreign address set, and a socket
that's connected will.

I noticed on Linux, it looks like this:
iago@darkside:~$ netstat -a | grep LISTEN
tcp        0      0 *:8001          *:*                LISTEN
tcp        0      0 *:3306          *:*                LISTEN
tcp        0      0 *:http          *:*                LISTEN
tcp        0      0 *:ssh           *:*                LISTEN
tcp        0      0 *:https         *:*                LISTEN

Probably 0.0.0.0:0 is just Windows's way of saying "not set"?

omibaba@gmail.com wrote:
> Active Connections
>
>   Proto  Local Address          Foreign Address        State
>   TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:445            0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1025           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1028           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1054           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1307           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1344           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1445           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1447           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1452           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1453           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1455           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1460           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1465           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1466           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1469           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1491           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1496           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1498           0.0.0.0:0              LISTENING
>   TCP    0.0.0.0:1507           0.0.0.0:0              LISTENING
>
> Above is the output of netstat -an |more
>
> Guys / Gals Do you know what means port zero in Windoze Platform ? I know the 
> answer but jst wanted to know anyone has a better explaination.
>
> In Unix Family port zero is used for socket programming but not the same in 
> Windoze family.
>
> I have asked this question in many programs of mine in CEH - Certfied Ethical 
> Hacking but still awaiting for answers. Lemme see if can get some answers for 
> this post!!!!
>
> Ciao
>
> Baba
> CEO
> Appsec
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.9.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC2p3XfqSf2EkP4p4RAky6AJ4uVgpt37oxTENJ3wjd9luWH8Jb/wCeOqO5
Sy6WrEhqEVR5SuOAQiQDgOM=
=5KEZ
-----END PGP SIGNATURE-----