Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Our Archives > General Archives > Servers > What are all these ports for?

 
What are all these ports for?
Thread Tools
Fresh-Faced Recruit
Join Date: Jul 2001
Location: Baltimore MD
Status: Offline
May 19, 2002, 12:07 PM
 
In looking into some processor use problems I found that the my Mac OS X Server (10.10...) box is binding to a whole slew of ports that I can’t account for services for. Is my experience out of the ordinary or is this standard behavior and I just don’t know what all these ports are for. I’d appreciate some guidance. Of course I know things like 80 and 22 are for standard services, I’m more interested in the ports in the 1000 range. Here’s what a netstart –ah reports:

Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address (state)
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
tcp 0 1120 [my ip].22 [my inside rougher].49651 ESTABLISHED
tcp 0 0 [my ip]..548 [my inside rougher].49650 ESTABLISHED
tcp 0 0 *.3306 *.* LISTEN
tcp 0 0 [my ip].548 [my ip].49156 ESTABLISHED
tcp 0 0 [my ip].49156 [my ip]..548 ESTABLISHED
tcp 0 0 [my ip].80 *.* LISTEN
tcp 0 0 *.660 *.* LISTEN
tcp 0 0 *.1085 *.* LISTEN
tcp 0 0 *.* *.* CLOSED
tcp 0 0 *.548 *.* LISTEN
tcp 0 0 127.0.0.1.1033 127.0.0.1.628 ESTABLISHED
tcp 0 0 127.0.0.1.628 127.0.0.1.1033 ESTABLISHED
tcp 0 0 127.0.0.1.1033 127.0.0.1.959 ESTABLISHED
tcp 0 0 127.0.0.1.959 127.0.0.1.1033 ESTABLISHED
tcp 0 0 66.93.54.220.53 *.* LISTEN
tcp 0 0 127.0.0.1.53 *.* LISTEN
tcp 0 0 127.0.0.1.54 *.* LISTEN
tcp 0 0 *.* *.* CLOSED
tcp 0 0 *.427 *.* LISTEN
tcp 0 0 *.22 *.* LISTEN
tcp 0 0 *.1240 *.* LISTEN
tcp 0 0 *.1220 *.* LISTEN
tcp 0 0 *.21 *.* LISTEN
tcp 0 0 127.0.0.1.1033 127.0.0.1.958 ESTABLISHED
tcp 0 0 127.0.0.1.958 127.0.0.1.1033 ESTABLISHED
tcp 0 60 127.0.0.1.1033 127.0.0.1.954 ESTABLISHED
tcp 0 0 127.0.0.1.954 127.0.0.1.1033 ESTABLISHED
tcp 0 0 127.0.0.1.1033 *.* LISTEN
udp 0 0 *.1085 *.*
udp 0 0 *.* *.*
udp 0 0 *.* *.*
udp 0 0 *.* *.*
udp 0 0 *.49158 *.*
udp 0 0 *.* *.*
udp 0 0 *.49157 *.*
udp 0 0 66.93.54.220.53 *.*
udp 0 0 127.0.0.1.53 *.*
udp 0 0 *.427 *.*
udp 0 0 *.49155 *.*
udp 0 0 127.0.0.1.49154 127.0.0.1.1007
udp 0 0 127.0.0.1.49153 127.0.0.1.1007
udp 0 0 *.1007 *.*
udp 0 0 66.93.54.220.123 *.*
udp 0 0 127.0.0.1.123 *.*
udp 0 0 *.123 *.*
udp 0 0 *.49152 *.*
udp 0 0 127.0.0.1.1033 *.*
udp 0 0 *.514 *.*
Peace, Love, & Understanding,

E.ric T.homas Gadsby
etgadsby@plutonianshore.com
     
Junior Member
Join Date: May 2002
Location: germany
Status: Offline
May 19, 2002, 03:06 PM
 
there should be a file named /etc/services (at least it exists on most UNIX systems) in which the well-known services and ports are listed.

maddjn
     
Fresh-Faced Recruit
Join Date: Apr 2002
Location: France
Status: Offline
May 19, 2002, 03:58 PM
 
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address (state)
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*
ip 0 0 *.* *.*

not important

tcp 0 1120 [my ip].22 [my inside rougher].49651 ESTABLISHED

ssh

tcp 0 0 [my ip]..548 [my inside rougher].49650 ESTABLISHED

AppleShare IP

tcp 0 0 *.3306 *.* LISTEN

?

tcp 0 0 [my ip].548 [my ip].49156 ESTABLISHED
tcp 0 0 [my ip].49156 [my ip]..548 ESTABLISHED

AppleShare IP

tcp 0 0 [my ip].80 *.* LISTEN

http

tcp 0 0 *.660 *.* LISTEN

Mac OS Server Admin

tcp 0 0 *.1085 *.* LISTEN

?

tcp 0 0 *.* *.* CLOSED

Closed Socket

tcp 0 0 *.548 *.* LISTEN

Apple Share IP

tcp 0 0 127.0.0.1.1033 127.0.0.1.628 ESTABLISHED
tcp 0 0 127.0.0.1.628 127.0.0.1.1033 ESTABLISHED
tcp 0 0 127.0.0.1.1033 127.0.0.1.959 ESTABLISHED
tcp 0 0 127.0.0.1.959 127.0.0.1.1033 ESTABLISHED

NetInfo

tcp 0 0 66.93.54.220.53 *.* LISTEN
tcp 0 0 127.0.0.1.53 *.* LISTEN

domain

tcp 0 0 127.0.0.1.54 *.* LISTEN

?

tcp 0 0 *.* *.* CLOSED

Socket closed

tcp 0 0 *.427 *.* LISTEN

Server Location

tcp 0 0 *.22 *.* LISTEN

ssh

tcp 0 0 *.1240 *.* LISTEN
tcp 0 0 *.1220 *.* LISTEN

?

tcp 0 0 *.21 *.* LISTEN

ftp

tcp 0 0 127.0.0.1.1033 127.0.0.1.958 ESTABLISHED
tcp 0 0 127.0.0.1.958 127.0.0.1.1033 ESTABLISHED
tcp 0 60 127.0.0.1.1033 127.0.0.1.954 ESTABLISHED
tcp 0 0 127.0.0.1.954 127.0.0.1.1033 ESTABLISHED
tcp 0 0 127.0.0.1.1033 *.* LISTEN

NetInfo

udp 0 0 *.1085 *.*
udp 0 0 *.* *.*
udp 0 0 *.* *.*
udp 0 0 *.* *.*
udp 0 0 *.49158 *.*
udp 0 0 *.* *.*
udp 0 0 *.49157 *.*
udp 0 0 66.93.54.220.53 *.*
udp 0 0 127.0.0.1.53 *.*

domain

udp 0 0 *.427 *.*

Server location

udp 0 0 *.49155 *.*
udp 0 0 127.0.0.1.49154 127.0.0.1.1007
udp 0 0 127.0.0.1.49153 127.0.0.1.1007
udp 0 0 *.1007 *.*

?

udp 0 0 66.93.54.220.123 *.*
udp 0 0 127.0.0.1.123 *.*
udp 0 0 *.123 *.*

NTP

udp 0 0 *.49152 *.*
udp 0 0 127.0.0.1.1033 *.*

NetInfo

udp 0 0 *.514 *.*

syslog

So to sum up, you're using a Mac OS X Server running a Web Server, an AppleShare IP server, a FTP server, NTP server, a DNS server and you can connect to it via ssh.
     
Mac Elite
Join Date: Sep 2000
Location: Canada
Status: Offline
May 20, 2002, 12:59 AM
 
Originally posted by reversi:
<STRONG>So to sum up, you're using a Mac OS X Server running a Web Server, an AppleShare IP server, a FTP server, NTP server, a DNS server and you can connect to it via ssh.</STRONG>
This is AppleShare IP. Port 548 is for AFP.

Port 1220 is QTSS administration via a web browser.

I suggest you check out pages 301-304 in the Admin Guide for more information.
     
Fresh-Faced Recruit
Join Date: Apr 2002
Location: France
Status: Offline
May 20, 2002, 12:12 PM
 
&gt;This is AppleShare IP. Port 548 is for AFP.

AppleShare IP = AFP in my mind.
     
 
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 11:36 PM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2