Port 7136

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Author Message
0xchris
DD-WRT Novice


Joined: 19 Dec 2010
Posts: 14

PostPosted: Mon Mar 28, 2011 16:34    Post subject: Port 7136 Reply with quote
What is dd-wrt listening for on those ports?
Code:

udp        0      0 localhost:34954         0.0.0.0:*
udp        0      0 0.0.0.0:7136            0.0.0.0:*
Sponsor
phuzi0n
DD-WRT Guru


Joined: 10 Oct 2006
Posts: 10143

PostPosted: Mon Mar 28, 2011 16:37    Post subject: Reply with quote
Provide more information.
_________________
Read the forum announcements thoroughly! Be cautious if you're inexperienced.
Available for paid consulting. (Don't PM about complicated setups otherwise)
Looking for bricks and spare routers to expand my collection. (not interested in G spec models)
0xchris
DD-WRT Novice


Joined: 19 Dec 2010
Posts: 14

PostPosted: Mon Mar 28, 2011 17:18    Post subject: Reply with quote
I just wanted to know, which services dd-wrt is listening to. I opened a shell and entered netstat -a. netstat -ap doesn't work.
0xchris
DD-WRT Novice


Joined: 19 Dec 2010
Posts: 14

PostPosted: Mon Mar 28, 2011 20:46    Post subject: Reply with quote
or better question: why are those ports opened? What services use them?
crashfly
DD-WRT Guru


Joined: 24 Feb 2009
Posts: 2025
Location: Sol System > Earth > USA > Arkansas

PostPosted: Mon Mar 28, 2011 23:17    Post subject: Reply with quote
What phuzi0n is referring to is that you have not mentioned your router type and your firmware revision. While we can guess I what you are running, until we know specific information, it could be damn near anything that is being loaded. Additionally, you should specify what services you are using and any specific features you have loaded on to DD-WRT. Otherwise, only *you* will have the information needed to solve your problem.
_________________
E3000 22200M KongVPN K26
WRT600n v1.1 refirb mega 18767 BS K24 NEWD2 [not used]
WRT54G v2 16214 BS K24 [access point]

Try Dropbox for syncing files - get 2.5gb online for free by signing up.

Read! Peacock thread
*PLEASE* upgrade PAST v24SP1 or no support.
0xchris
DD-WRT Novice


Joined: 19 Dec 2010
Posts: 14

PostPosted: Tue Mar 29, 2011 16:01    Post subject: Reply with quote
oh, thank you. didn't understand the question.

this one: DD-WRT v24-sp2 std (c) 2009 NewMedia-NET GmbH
Release: 07/21/09 (SVN revision: 12533)

I use the dd-wrt als wlan client. no other special configuration or modification.

Code:

root@DD-WRT:~# netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       
tcp        0      0 0.0.0.0:www             0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:domain          0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:ssh             0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:telnet          0.0.0.0:*               LISTEN     
tcp        0      0 DD-WRT:ssh              RP614v4:33084           ESTABLISHED
udp        0      0 localhost:34954         0.0.0.0:*                           
udp        0      0 0.0.0.0:domain          0.0.0.0:*                           
udp        0      0 0.0.0.0:bootps          0.0.0.0:*                           
udp        0      0 0.0.0.0:bootps          0.0.0.0:*                           
raw        0      0 0.0.0.0:255             0.0.0.0:*               255         
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  3      [ ]         STREAM     CONNECTED       1465
unix  3      [ ]         STREAM     CONNECTED       1464
unix  2      [ ]         DGRAM                      1132



Is there any way to rule out any rootkits?

Are there any security issues in this version?
crashfly
DD-WRT Guru


Joined: 24 Feb 2009
Posts: 2025
Location: Sol System > Earth > USA > Arkansas

PostPosted: Tue Mar 29, 2011 16:55    Post subject: Reply with quote
Now that I am looking at it, that seems to be a local loopback. I think on the 'older' versions, there was some question as to what some odd port was. I think it has been corrected in the more recent versions (as mine does not have that issue). I do not think it was a security problem only because it was attached to the "localhost".

I want to say that frater had noticed the issue, and it was fixed by Eko not too long afterwards (don't quote me on that).

_________________
E3000 22200M KongVPN K26
WRT600n v1.1 refirb mega 18767 BS K24 NEWD2 [not used]
WRT54G v2 16214 BS K24 [access point]

Try Dropbox for syncing files - get 2.5gb online for free by signing up.

Read! Peacock thread
*PLEASE* upgrade PAST v24SP1 or no support.
phuzi0n
DD-WRT Guru


Joined: 10 Oct 2006
Posts: 10143

PostPosted: Tue Mar 29, 2011 16:55    Post subject: Reply with quote
34954 is bound to the loopback address and is normally there, so whatever it is, it's not really any concern.

7136 is gone from your second output so did you change anything?

_________________
Read the forum announcements thoroughly! Be cautious if you're inexperienced.
Available for paid consulting. (Don't PM about complicated setups otherwise)
Looking for bricks and spare routers to expand my collection. (not interested in G spec models)
0xchris
DD-WRT Novice


Joined: 19 Dec 2010
Posts: 14

PostPosted: Tue Mar 29, 2011 20:35    Post subject: Reply with quote
phuzi0n wrote:
7136 is gone from your second output so did you change anything?


Not that I'm aware of. It has vanished:

Code:

root@DD-WRT:~# netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       
tcp        0      0 0.0.0.0:www             0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:domain          0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:ssh             0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:telnet          0.0.0.0:*               LISTEN     
tcp        0      0 DD-WRT:ssh              RP614v4:33345           ESTABLISHED
udp        0      0 localhost:34954         0.0.0.0:*                           
udp        0      0 0.0.0.0:domain          0.0.0.0:*                           
udp        0      0 0.0.0.0:bootps          0.0.0.0:*                           
udp        0      0 0.0.0.0:bootps          0.0.0.0:*                           
raw        0      0 0.0.0.0:255             0.0.0.0:*               255         
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  3      [ ]         STREAM     CONNECTED       1465
unix  3      [ ]         STREAM     CONNECTED       1464
unix  2      [ ]         DGRAM                      1132

deltatux
DD-WRT User


Joined: 22 Jan 2011
Posts: 72

PostPosted: Tue Mar 29, 2011 22:17    Post subject: Reply with quote
next time, issue:
Code:

netstat -an


It will not resolve any domain names or ports ... it will help us look at this easier ... it might be hiding behind a resolved port name.

deltatux
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum