Well I found out what it was. This is the issue when you have more then one person working on a server. My company has a team of folks over seas that runs an application on this box. Documentation has not been finished yet, so I had no idea to know that port 9000 was being used be a program they have running on this system. I do now. Live and learn. IT is like going to school every day. Nothing malicious, all is well :-) ----- Original Message ----- From: "Charles R. Buchanan" <crbgfblab@xxxxxxxxxxxxx> To: <windows2000@xxxxxxxxxxxxx> Sent: Friday, October 25, 2002 2:50 PM Subject: [windows2000] Re: Port 9000 > > doing a tracert on that address, I get as far as ip68-2-6-30.ph.ph.cox.net > and it times out! <shrug> > > >-----Original Message----- > >From: windows2000-bounce@xxxxxxxxxxxxx > >[mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of G.Lemos > >Sent: Friday, October 25, 2002 11:03 AM > >To: windows2000@xxxxxxxxxxxxx > >Subject: [windows2000] Re: Port 9000 > > > > > > > >I am not aware of anything on this server the needs port 9000, and the IP > >address the connection was established to does not ring a bell. > >(68.3.92.80) > >Almost 5pm.... > >-G > > > > > > > > > > > >----- Original Message ----- > >From: "Aaron Dokey" <adokey@xxxxxxxxxxxx> > >To: <windows2000@xxxxxxxxxxxxx> > >Sent: Friday, October 25, 2002 2:00 PM > >Subject: [windows2000] Re: Port 9000 > > > > > >> > >> I believe there are some services on Oracle's 9iAS that use > >9000. I think > >> it's their Forms Server. We use 9iAS here and I believe we > >change this to > >> 9001. > >> > >> -Aaron > >> > >> ----------------------- > >> Aaron Dokey - MIS > >> Reid Tool Supply > >> 2265 Black Creek Rd. > >> Muskegon, MI 49444 > >> (231) 777-3951 > >> (231) 767-3772 (Direct) > >> ----------------------- > >> > >> -----Original Message----- > >> From: G.Lemos [mailto:listreader@xxxxxxxxxxxx] > >> Sent: Friday, October 25, 2002 1:49 PM > >> To: windows2000@xxxxxxxxxxxxx > >> Subject: [windows2000] Re: Port 9000 > >> > >> > >> > >> Relooking at: > >> > >> TCP xxx.xxx.xxx.xxx:9000 68.3.92.80:4690 ESTABLISHED > >> TCP xxx.xxx.xxx.xxx:9000 68.3.92.80:4691 ESTABLISHED > >> > >> > >> > >> I searched for port 9000 at > >http://www.iana.org/assignments/port-numbers. > >> > >> Looks like: > >> > >> cslistener 9000/tcp CSlistener > >> cslistener 9000/udp CSlistener > >> > >> > >> > >> Guess what I should really do is research CSlistener, please pass any > >> experiences with this if you have any, and thanks! > >> > >> > >> > >> > >> > >> ----- Original Message ----- > >> From: "G.Lemos" <listreader@xxxxxxxxxxxx> > >> To: <windows2000@xxxxxxxxxxxxx> > >> Sent: Friday, October 25, 2002 12:29 PM > >> Subject: [windows2000] Re: Port 4690 & 4691 > >> > >> > >> > > >> > Nope.. > >> > Plus I ended up killing the connection with a sysinternals utility. > >> > > >> > > >> > ----- Original Message ----- > >> > From: "Joe Shonk" <JShonk@xxxxxxxxxxxxxx> > >> > To: <windows2000@xxxxxxxxxxxxx> > >> > Sent: Friday, October 25, 2002 12:28 PM > >> > Subject: [windows2000] Re: Port 4690 & 4691 > >> > > >> > > >> > > > >> > > Are your printing to any Jetdirect or other IP based network printer? > >> > > > >> > > Joe > >> > > > >> > > -----Original Message----- > >> > > From: G.Lemos [mailto:listreader@xxxxxxxxxxxx] > >> > > Sent: Friday, October 25, 2002 10:08 AM > >> > > To: windows2000@xxxxxxxxxxxxx > >> > > Subject: [windows2000] Re: Port 4690 & 4691 > >> > > > >> > > > >> > > > >> > > Actually, port 9000 > >> > > 4690 & 4691 are probably just the random ports. > >> > > > >> > > > >> > > ----- Original Message -----=20 > >> > > From: "G.Lemos" <listreader@xxxxxxxxxxxx> > >> > > To: <windows2000@xxxxxxxxxxxxx> > >> > > Sent: Friday, October 25, 2002 11:45 AM > >> > > Subject: [windows2000] Port 4690 & 4691 > >> > > > >> > > > >> > > >=20 > >> > > > Anyone have any experience with Port 4690 & 4691? I found the below > >= > >> > > after > >> > > > doing a netstat and google didn't bring my much info as far as what > >= > >> > > they > >> > > > could be. http://www.iana.org/assignments/port-numbers did not list > >> > > > anything. > >> > > >=20 > >> > > >=20 > >> > > >=20 > >> > > > IP: > >> > > >=20 > >> > > > TCP xxx.xxx.xxx.xxx:9000 68.3.92.80:4690 > >ESTABLISHED > >> > > > TCP xxx.xxx.xxx.xxx:9000 68.3.92.80:4691 > >ESTABLISHED > >> > > >=20 > >> > > >=20 > >> > > > = > >> > > > >> > > >> > >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > >3D=3D=3D= > >> > > =3D=3D=3D=3D=3D=3D=3D=3D=3D > >> > > > To Unsubscribe, set digest or vacation > >> > > > mode or view archives use the below link. > >> > > >=20 > >> > > > http://thethin.net/win2000list.cfm > >> > > >=20 > >> > > > >> > > > >> > > >> > >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= > >3D=3D=3D= > >> > > =3D=3D=3D=3D=3D=3D=3D=3D=3D > >> > > To Unsubscribe, set digest or vacation > >> > > mode or view archives use the below link. > >> > > > >> > > http://thethin.net/win2000list.cfm > >> > > > >> > > ================================== > >> > > To Unsubscribe, set digest or vacation > >> > > mode or view archives use the below link. > >> > > > >> > > http://thethin.net/win2000list.cfm > >> > > > >> > > >> > > >> > ================================== > >> > To Unsubscribe, set digest or vacation > >> > mode or view archives use the below link. > >> > > >> > http://thethin.net/win2000list.cfm > >> > > >> > >> > >> ================================== > >> To Unsubscribe, set digest or vacation > >> mode or view archives use the below link. > >> > >> http://thethin.net/win2000list.cfm > >> > >> ================================== > >> To Unsubscribe, set digest or vacation > >> mode or view archives use the below link. > >> > >> http://thethin.net/win2000list.cfm > >> > > > > > >================================== > >To Unsubscribe, set digest or vacation > >mode or view archives use the below link. > > > >http://thethin.net/win2000list.cfm > > > --- > It's lights OUT for you viruses! > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.408 / Virus Database: 230 - Release Date: 10/24/2002 > > > > ================================== > To Unsubscribe, set digest or vacation > mode or view archives use the below link. > > http://thethin.net/win2000list.cfm > ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm