Good Day,
I have been assigned the task to create a list of ports that must remain open on my servers. I have used the program ‘Active Ports’ to scan eight of my 900 some servers (all the servers are running the same software with Windows 2003 Server as the OS).
I have received mixed results from my scans and wanted to ask if there was a better way to determine a way to identify all active ports.
I am sorry if this sounds like networking 101, but I have never been asked to do this before and I want to make sure I am reading my results correctly.
Here is one of the items scanned from Active Ports:
C:\windows\system32\dwcrs.exe [556]
TCP 127.0.0.1:6139 127.0.0.1:3271 Established
TCP 0.0.0.0 :6129 0.0.0.0 :0 Listening
TCP 127.0.0.1:6139 0.0.0.0 :0 Listening
The number in brackets near the process, is that the port (556) that dwcrs.exe uses?
Or are the ports this service uses near the loopback (6129 & 6139)?
If the second is true, why do I have several servers that are using the same applications in the same manner but using different ports for those applications?
Again, I am sorry for sounding so rudimentary; I am just not very familiar with the port scans displaying differently across servers that are running the same applications.
Thank You for your help!
