TCP PORT 11500 Mapserver

[epoide]

Hi Everyone,

I saw that the 7750 and 7705 has an application listening on TCP/11500 and i saw some strings that is called mapserver. Anyone could tell me what is this? Should i disable this service ? The only information i could get about this port was that other alcatel-lucent devices uses as this:

https://infocenter.alcatel-lucent.com/p ... urity.html

11500
TCP
None.
Equipment View
Used while managing 9500 MPR (MSS-1C, MPR-e) NEs using the Equipment View function as part of NetO

It looks that it could be a management port? Is there any client app to use against this port?

Thank you.

[mivens]

If I do an NMAP scan of a 7750 in the lab, I don't see that port open.

Code: Select all

PORT      STATE    SERVICE
20/tcp    filtered ftp-data
21/tcp    filtered ftp
22/tcp    filtered ssh
23/tcp    filtered telnet
80/tcp    filtered http
179/tcp   open     bgp
443/tcp   filtered https
646/tcp   open     ldp
830/tcp   filtered netconf-ssh
1491/tcp  open     anynetgateway
6068/tcp  open     gsmp
47806/tcp filtered ap

[epoide]

Hi,
Thank you for your reply.

I guess you executed nmap to all ports and not only the common ports:

This is the nmap result from a 7705 against the 11500/TCP port :
$ sudo nmap -sS -p11500 x.x.x.x

Starting Nmap 6.47 ( http://nmap.org ) at 2016-06-15 03:56 MST
Nmap scan report for
Host is up (0.00045s latency).
PORT STATE SERVICE
11500/tcp open unknown

[mivens]

Yep, I did everything up to 65535 and also explicitly scanned 11500.

Do you see that port in the output of the command "show system connections | match LISTEN" ?

If you have a lab box, do you see the port open it if you boot it with default configuration?

[epoide]

Hi,

Yes, now it is running with default config (7705) but also i activated the telnet and ftp services (for testing purposes) :

TCP 0 0 0.0.0.0.21 LISTEN
TCP 0 0 0.0.0.0.22 LISTEN
TCP 0 0 0.0.0.0.23 LISTEN
TCP 0 0 0.0.0.0.6068 LISTEN
TCP 0 0 0.0.0.0.11500 LISTEN
TCP 0 0 ::.21 LISTEN
TCP 0 0 0.0.0.0.9500 LISTEN

Nobody knows about this port/application? It is so weird!

Thank you.

[mivens]

You can manage a 9500 MPR-e Microwave link as part of your 7705 from 5620 SAM.

My guess is that service on port 11500 is for that.
Do you have an mw-pic MDA installed in your 7705? If so, what if you shut it down/take it out?

You definitely see this on a 7750 as well?