The Database as a Networked Server - Implementing Database Security and Auditing - page 82

Table 3.2 Default Oracle 11i Ports

Component Default Port

Database

1521

RPC/FNDFS

1526

Reports Server

7000

Web Server (Apache)

8000

Forms Server

9000

Servlet

8880

TCF Server

15000

Metrics Server Data

9110

Metrics Server Requests

9120

is at the moment disconnected from the network), I get a listing that
includes my SQL Server connection on port 1433 (display as ms-sql-s):

Active Connections

Proto Local Address Foreign Address State
TCP ron-snyhr85g9dj:ms-sql-s localhost:3245 ESTABLISHED
TCP ron-snyhr85g9dj:3241 localhost:ms-sql-s TIME_WAIT
TCP ron-snyhr85g9dj:3245 localhost:ms-sql-s ESTABLISHED
TCP ron-snyhr85g9dj:1830 ron-snyhr85g9dj.mshome.net:3203 TIME_WAIT
TCP ron-snyhr85g9dj:1830 ron-snyhr85g9dj.mshome.net:3218 TIME_WAIT
TCP ron-snyhr85g9dj:1830 ron-snyhr85g9dj.mshome.net:3234 TIME_WAIT
TCP ron-snyhr85g9dj:3200 ron-snyhr85g9dj.mshome.net:5500 TIME_WAIT
TCP ron-snyhr85g9dj:3215 ron-snyhr85g9dj.mshome.net:5500 TIME_WAIT
TCP ron-snyhr85g9dj:3231 ron-snyhr85g9dj.mshome.net:5500 TIME_WAIT
TCP ron-snyhr85g9dj:3242 ron-snyhr85g9dj.mshome.net:5500 ESTABLISHED
TCP ron-snyhr85g9dj:3244 ron-snyhr85g9dj.mshome.net:5500 ESTABLISHED
TCP ron-snyhr85g9dj:3246 ron-snyhr85g9dj.mshome.net:1521 SYN_SENT
TCP ron-snyhr85g9dj:3247 ron-snyhr85g9dj.mshome.net:1521 SYN_SENT
TCP ron-snyhr85g9dj:5500 ron-snyhr85g9dj.mshome.net:3242 ESTABLISHED
TCP ron-snyhr85g9dj:5500 ron-snyhr85g9dj.mshome.net:3244 ESTABLISHED
TCP ron-snyhr85g9dj:29839 ron-snyhr85g9dj.mshome.net:2869 TIME_WAIT

The second tool you should know about is nmap —one of the most pop-
ular port scanners. You need to know about port scanning because it is one
of the most popular reconnaissance techniques hackers use to discover ser-
vices they can break into. Port scanning consists of sending a message to
each port and deciding, based on the response, whether a service is running
on that port and often what that service is. If you're wondering, port scan-
ning is completely legal and was actually disputed in a federal court in
2000. You would be amazed at the number of port scans any system on the