Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I see a lot of connection attempts to 1283/tcp on my firewall from a client computer to a Windows Server 2008 Domain Controller. What exactly is this traffic? Something to do with NetBIOS, perhaps?

share|improve this question
    
I see there's a well-known service called ProductInfo on that port, but I can't find any useful description of that service either. –  kbluck May 10 '10 at 23:27

4 Answers 4

According to IANA "registered" port list, maybe something called EWALL? Other than that, I'd put Wireshark on it and see if if you can see anything from the packet side.

Although anything can use any port number (given permissions) so this is by no means an exhaustive list.

share|improve this answer
    
+1 You can't beat looking at the traffic. –  John Gardeniers May 11 '10 at 5:46

Use CurrPorts on the client to identify the application that is using the port.

(You could also use the built-in netstat command from a Command Prompt, but a GUI application like CurrPorts is far simpler in this case.)

share|improve this answer
up vote 0 down vote accepted

It appears to be a Shoretel VoIP application.

share|improve this answer

IANA Ports This list says it is

 productinfo     1283/tcp   Product Information 
 productinfo     1283/udp   Product Information 
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.