port 2001 and 6001 open ????

[abovebrd]

I just noticed the following two services open on a 2500 series router

2001 open tcp dc
6001 open tcp X11:1

I did a quick search on the cisco site and could not find any mention of these two services ?

Can anyone shed some light as to how these services can be disabled. That is outside of the extended access list.

Or better yet what purpose they are serving on my router ?

Just curiuos
-Danny
techie@snoboarder.net

 

[marsd]

Don't be alarmed at the url, the ids places have some of the best dope on well known ports.

http://www.networkice.com/advice/Exploits/Ports/

Cisco may use these ports for other things.
But 6000-6010 is usually X.

 

[SIGSEGV]

Not sure what all cisco is including now as their "tcp and udp small servers", but make sure you have

no service tcp-small-servers
no service udp-small-servers

See what ports are open from the router itself with the commands:

show tcp brief all | include LISTEN

and for IP sockets (udp, raw, etc)

show ip sockets