1

I see a lot of connection attempts to 1283/tcp on my firewall from a client computer to a Windows Server 2008 Domain Controller. What exactly is this traffic? Something to do with NetBIOS, perhaps?

Improve this question
1
  • I see there's a well-known service called ProductInfo on that port, but I can't find any useful description of that service either.
    – kbluck
    May 10, 2010 at 23:27

4 Answers 4

Reset to default
3

According to IANA "registered" port list, maybe something called EWALL? Other than that, I'd put Wireshark on it and see if if you can see anything from the packet side.

Although anything can use any port number (given permissions) so this is by no means an exhaustive list.

Improve this answer
1
  • +1 You can't beat looking at the traffic.
    – John Gardeniers
    May 11, 2010 at 5:46
1

Use CurrPorts on the client to identify the application that is using the port.

(You could also use the built-in netstat command from a Command Prompt, but a GUI application like CurrPorts is far simpler in this case.)

Improve this answer
0

It appears to be a Shoretel VoIP application.

Improve this answer
0

IANA Ports This list says it is 

 productinfo     1283/tcp   Product Information 
 productinfo     1283/udp   Product Information
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .