PDA

View Full Version : Port 1234 on WARP busybox



black187
03-24-11, 05:50 AM
Hello,

I want to know, why is port 1234 (Nmap classifies it as "hotline") open?

What service use it?

mrecoskie
03-28-11, 11:23 AM
Port 1234 is opened by the 'astmanproxy' application that controls the LCD however I don't believe it is really needed. It is only used as a new connection listener. In one project I simply removed the code opening this port. The code is found in the 'main' function of astmanproxy.

As part of the same project I looked into all the open ports on Warp. Here are some of my findings. In the end, there were a few additional ports that I disabled as they were not needed for my project. These were port 2000 opened as part of the Cisco protocol Skinny, port 4520 for asterisk dundi and port 2727 for mgcp.

/persistent/root # netstat -l
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN -> mysql
tcp 0 0 0.0.0.0:5038 0.0.0.0:* LISTEN -> AMI for LCD
tcp 0 0 0.0.0.0:http 0.0.0.0:* LISTEN -> http
tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN -> skinny
tcp 0 0 0.0.0.0:1234 0.0.0.0:* LISTEN -> new connection listener for LCD
tcp 0 0 0.0.0.0:domain 0.0.0.0:* LISTEN -> dns
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -> ssh
tcp 0 0 localhost:8888 0.0.0.0:* LISTEN -> putty
udp 0 0 0.0.0.0:2727 0.0.0.0:* -> mgcp
udp 0 0 0.0.0.0:4520 0.0.0.0:* -> dundi
udp 0 0 0.0.0.0:domain 0.0.0.0:* -> dns
udp 0 0 0.0.0.0:bootpc 0.0.0.0:*
udp 0 0 0.0.0.0:5060 0.0.0.0:* -> sip
udp 0 0 0.0.0.0:tftp 0.0.0.0:* -> tftp
udp 0 0 0.0.0.0:4569 0.0.0.0:* -> iax
udp 0 0 192.168.68.50:ntp 0.0.0.0:* -> ntp
udp 0 0 localhost:ntp 0.0.0.0:*
udp 0 0 0.0.0.0:ntp 0.0.0.0:*