Understand Port Number 1027

[toolband]

Could someone please help me with a problem i have had for a very long time. Its that could someone tell me what port 1027 is referring too. For example here is what i get when i do a netstat in DOS for Windows.
66.212.233.226:https
app-lb02.sv.spinway.c
ads.web.aol.com:http
localhost:2087
localhost:2089
localhost:1027
localhost:1027
localhost:1027
localhost:1027
localhost:1027
localhost:1027
localhost:1027
localhost:1027

I Don't understand what all of those 1027 mean. Some of them are established and i am not quite sure for what. Please Help Thanks

Toolband

 

[shan]

I found this at the Novell website @ http://developer.novell.com/research/appnotes/1998/march/04/04.htm

Example LZFW output on Private network:

No. Source Destination Layer Size Summary
=== ====== =========== ===== ==== =======
3 FTPCLNT NAT_PRIV tcp 0064 Port:1027 ---> FTP SYN
4 NAT_PRIV FTPCLNT tcp 0064 Port:FTP ---> 1027 ACK SYN
5 FTPCLNT NAT_PRIV tcp 0064 Port:1027 ---> FTP ACK
6 NAT_PRIV FTPCLNT ftp 0148 ReplyService ready for new user)
7 FTPCLNT NAT_PRIV tcp 0064 Port:1027 ---> FTP ACK
8 FTPCLNT NAT_PRIV ftp 0073 Command=USER(User Name)
9 NAT_PRIV FTPCLNT tcp 0064 Port:FTP ---> 1027 ACK
10 NAT_PRIV FTPCLNT ftp 0088 ReplyUser logged in, proceed.)
11 FTPCLNT NAT_PRIV tcp 0064 Port:1027 ---> FTP ACK

The TCP source port for the connection is 1027. Since NAT running in dynamic mode uses the PORT number to map the public IP address to the private IP address, we should see this field change in the trace taken on the public segment.

 

[shan]

What OS and/or Servers do you have running on your computer?

 

[roho]

Port 1027 is used for ICQ

It is also a port used by some trojans:

http://www.simovits.com/trojans/trojans.html

 

[toolband]

Currently I am running Window Xp Professional. I think the conclusion that I thought of after reading that articale that you posted, shan is that the 1027 port is just a temperaory port used to loopback to the port that its really for. Like how it is in the articale. But I maybe wrong.

 

[Apokalipse]

Windows XP has a built in firewall, Internet Explorer actally told me when someone tried to hack in to our computer one time