Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 6th, 2008, 10:53pm
   Mischel Internet Security Forum
   Internet Security
   General (Moderators: Helena, Gavin_Coe, Magnus)
   NonTech-trying to understand ports...pls point me		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: NonTech-trying to understand ports...pls point me  (Read 556 times)
dsteve54
Newbie
*





   


Posts: 9
NonTech-trying to understand ports...pls point me
« on: Mar 3rd, 2003, 10:30am »		 Quote Quote  Modify Modify
Embarassed
I'm sorry...I just went to the forum that I thought would support the most naiive questions.  Embarassed  I am just brand new to Trojanhunter 3.01 Build 672 and I am not a tech person.  I am licensed and made sure I updated with the current reference file as of 3/3/03....I am running Windows XP Pro.
 
My FULL SCAN shows no infractions at all.  So I am good for now.  
 
Then for example, I run AOL Instant Messenger and upon rerun of TJ I get, on my particular machine anyway,
 
Port 5180/TCP is open (matches Peeper.120)
 
I can shut AOL IM off, and rerun TJ and this vanishes...well I don't think I have so-called Peeper.120.
 
I just do not understand this port stuff....I don't know whether I need to be reading somewhere about operating systems or whether I need to be reading about TCP protocol or other kinds of protocols or what.
 
I see this link called ports.tantalo.net, but that does not explain the basic concept for me.
 
I am not asking anyone to reinvent the wheel for me...if you could just point me to a web site that could explain in reasonably plain language what a port is and how they come into play that would really help.
 
I know that hackers scan for open ports to gain entry and I guess one can use sites like
 
http://www.hackerwhacker.com/
 
to test yourself for safety, but I still do not get a real satisfactory answer about the concept...there is a "for beginners" section in the above site, but that is probably a little too simplified.
 
I am trying to understand on the level something like this:
Does an application program like, say AOL IM, call subroutines that call operating system "HuhservicesHuh" that open ports?  Is that what is going on?  And I am still not sure what a port is.  And I do not know the internals of operating systems.
 
Ok, well maybe that is enough to have somebody point me to a web site somewhere to help me educate myself.  I mean, am I going to have to understand, like Interprocess Communications, like in Unix?  I really don't want to try to understand a kernel...I am just an average guy.
 
Thanks for any help....sorry I just can't compete on the level of people writing these threads.
 
IP Logged
vampirefo1
Senior Member
****



I love YaBB 1 Gold!

   
Email

Posts: 328
Re: NonTech-trying to understand ports...pls point
« Reply #1 on: Mar 3rd, 2003, 12:21pm »		 Quote Quote  Modify Modify
A port in simple terms is a window, or door it allows communication to freely flow from and to your PC. Any program that wants or needs to communicate to another computer or web server, must go out through a port, ie window or door.
 
In your case AOL Instant Messenger needs to connect to a chat server, so it open port 5180 to make to connection to allow you to use the program.
 
TH is just letting you know port 5180 is open, and is also used by a Trojan, Seeing you are using AOL Instant Messenger you are fine nothing to worry about.
 
If you were not using AOL Instant Messenger, then you would need to know what application, opened that port.
 
As far as sites, I guess start here http://grc.com
IP Logged
TrojanHunter Stands for privacy !!!!!!!!!!!




Companies would rather lose you as a customer than fix the problem
dauni
Newbie
*



Baby Win-user

    mortwenty


Gender: female
 Posts: 6
Re: NonTech-trying to understand ports...pls point
« Reply #2 on: Mar 3rd, 2003, 8:59pm »		 Quote Quote  Modify Modify
Microsoft Knowledge Base Article - 281336  
HOW TO: Determine Which Program Uses or Blocks Specific Transmission Control Protocol Ports in Windows
http://support.microsoft.com/?kbid=281336
 
and if you haven't - run - into this wonderful http://www.blkviper.com/WinXP/servicecfg.htm site.
 
Running TH also poked my curious nose as to what, who, where and why on ports. Hope these help.
IP Logged
dsteve54
Newbie
*





   


Posts: 9
Re: NonTech-trying to understand ports...pls point
« Reply #3 on: Mar 3rd, 2003, 11:48pm »		 Quote Quote  Modify Modify
vampirefo1 and dauni,
Thank you so much for your various references.  I will just have to do a little footwork...my initial navigation of the grc.com site suggested did not find the elementary explanations that maybe you intended me to find, but I will just look harder.
 
For dauni, I should be able to piece what the MS Knowledgebase article offers with the Black Viper site...these may help me EMPIRICALLY understand ports better.  I tried looking at the Black Viper site initially....at that particular time, early in trying to learn,  I was a little confused with what I was looking at.  Maybe the layout was a little busy for me.....but I will re-examine after I run the netstat stuff and see if I can make sense and also tune.  It seems to be more of a tuning up site than an explanatory site.
 
I am still looking for a place where I can theoretically get a better understanding, but I will just keep rummaging.  I guess I am just not all that intelligent yet about the internals versus other people on the boards here.  Thanks to both for your explanations, contributions, and/or site offerings.  Smiley
IP Logged
Walter
Veteran
*****





   


Gender: male
 Posts: 573
Re: NonTech-trying to understand ports...pls point
« Reply #4 on: Mar 4th, 2003, 2:22am »		 Quote Quote  Modify Modify
dsteve54,
 
Welcome!
Not long ago, I think I was (almost) exactly where you are, though I am guessing you actually know more than I did. At the time I did not know anything! concerning firewalls, AVs and/or ATs.  
 
"Port," that still seems a somewhat strange term. I always think of "port" cities, with ships coming and going. In a way, ports ARE (sort of!) like that. I mean they are, I guess, points (unseen places?) of "access."  
 
As you can see, perhaps I haven't made a huge amount of progress in my knowledge of internet security matters!  Grin  One of the reasons I rely on "others": TH, NOD32, OutPost firewall, and this forum (Wilders too, sometimes).
 
vampirefo1 already suggested the grc site. Yet, I understand and can relate to your comments. There is indeed A LOT of information there!!
 
Try this specific page, at the grc site. I think there are some decent links, too, from this page to other (similar) pages? Here it is:
 
http://grc.com/su-ports.htm
 
I think that is correct. Maybe, do a copy and paste, putting it directly into your browser Address window? Good luck.
IP Logged
Strange as it may seem, no amount of learning can cure stupidity, and formal education positively fortifies it. S Vizinczey
dsteve54
Newbie
*





   


Posts: 9
Re: NonTech-trying to understand ports...pls point
« Reply #5 on: Mar 4th, 2003, 2:59am »		 Quote Quote  Modify Modify
Walter, thanks for the refined link for grc.com and for empathizing  Tongue...I will just have to use all that people offer and keep probing around. Smiley  People have been great in responding.
 
I know that this site called:
http://www.hackerwhacker.com/  
may do alot to help me understand, but it is oriented toward informing people about malicious behavior....I think I can learn alot about things in general from how resources are misused.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register