Ports 1024, 1047, and 3020

[Christopher R. Hertel]

Okay, I'm confused.

Looking at the TCPIP.INI file that comes with NetMon, I note that ports 
1024, 1047, and 3020 are parsed using the NBT parser.  Huh?

What's happening on these ports?  The selected snippings below show that
445 is parsed using session service, which I would expect, but so are TCP
1024, 1047, and 3020.  I also note that TCP 137 and 138 are listed, though
they shouldn't be used.  Under UDP it seems that UDP/139 is getting handed
off to the session service (though UDP isn't used for NBT sessions), and
UDP/3020 is being handled by the datagram service parser.  Odd. 

Chris -)-----

:
; tcp handoff data for NBT
; 1000 is NS
; 1001 is SS
; 1002 is DS
:

[TCP_HandoffSet]
:
   137  = NBT, 1000
   138  = NBT, 1002
   139  = NBT, 1001
:
   445  = NBT,1001
:
   1024 = NBT, 1001
   1047 = NBT, 1001
:
   3020 = NBT,1001

[UDP_HandoffSet]
:
   137  = NBT, 1000
   138  = NBT, 1002
   139  = NBT, 1001
:
   3020 = NBT,1002



-- 
Christopher R. Hertel -)-----                   University of Minnesota
crh at nts.umn.edu              Networking and Telecommunications Services

    Ideals are like stars; you will not succeed in touching them
    with your hands...you choose them as your guides, and following
    them you will reach your destiny.  --Carl Schultz