Win98 listening on port 68

Running Win98.

I have just run netstat, and see that there is a server listening on
port 68. According to my ports list:

68:BOOTPC - Bootstrap Protocol Client

I've never noticed this before. What's going on here?

--
Ian

Bojidar
Fri May 07 01:47:05 CDT 2004

Get FPort
http://www.foundstone.com/knowledge/proddesc/fport.html

It will list open ports per process - see whish process has opened this port
and post here again.

Bojidar Alexandrov

Ian
Fri May 07 03:00:12 CDT 2004

In message <OgbkN8$MEHA.2488@TK2MSFTNGP10.phx.gbl>, Bojidar Alexandrov
<bojo@kodar.net> writes
>Get FPort
>http://www.foundstone.com/knowledge/proddesc/fport.html
>
>It will list open ports per process - see whish process has opened this port
>and post here again.
>

Thanks Bojidar. Small problem, though: it does not work with Win98. Do
you know of a Win98 version with similar functionality?

--
Ian

Bojidar
Fri May 07 03:20:57 CDT 2004

I have also another good one - aports but it is for 2k/XP too

This one claims to run on 98 0 try it:

inzider
http://ntsecurity.nu/toolbox/

Bojidar Alexandrov

Ian
Fri May 07 03:40:25 CDT 2004

In message <udT6twANEHA.4036@TK2MSFTNGP12.phx.gbl>, Bojidar Alexandrov
<bojo@kodar.net> writes
>I have also another good one - aports but it is for 2k/XP too
>
>This one claims to run on 98 0 try it:
>
>inzider
>http://ntsecurity.nu/toolbox/
>

Hmmm. It looks like it might do the job, but I can't download it
properly: when I try to run it, it complains: "The data section attached
to this self-extractor has been damaged."

The downloaded file is 243092 bytes long. Chto delat' seichas?

--
Ian

Bojidar
Fri May 07 03:52:55 CDT 2004

> Hmmm. It looks like it might do the job, but I can't download it
> properly: when I try to run it, it complains: "The data section attached
> to this self-extractor has been damaged."
>
> The downloaded file is 243092 bytes long. Chto delat' seichas?

I have downloaded it sucessfully. Same length. I can send it to you by email
after attaching a trojan to it (jocking).

Actually I am Bulgarian but know russian :)

Bojidar Alexandrov

Sadie
Fri May 07 13:23:24 CDT 2004

Not sure whether this is applicable to 98 machines,though
protocols are protocols,so..
When you establish a connection to the internet,Boots PC
requests information from your I.S.P. concerning the
allocation of your comps place on the net,DHCP guff and
all that.Boots PS:69 plays a part,too.It is perfectly
normal that BOOTS PC is "listening" in the first moments
of connecting to the net,til negotiation is complete with
the I.P's server.
This process will be performed eachtime you re-connect.

However,if you are certain that BOOTS PC is
permanently "listening"-even if you've been on the net
for two hours or whatever,then it probably does need
further investigation.

Is your firewall notifying you of any random connection
attempts to BOOTS PC or PS,whilst you are surfing?
(if you're using the inbuilt XP firewall,you might
consider trying a free firewall that will notify you of
incoming/outgoing traffic/connection attempts,just until
your mind is at rest.Sygate,for example,will term BOOTS
PC under "generic host process"-not terribly speciffic.
Norman Internet Control is costly,but will note every
port in detail.)
>-----Original Message-----
>Running Win98.
>
>I have just run netstat, and see that there is a server
listening on
>port 68. According to my ports list:
>
>68:BOOTPC - Bootstrap Protocol Client
>
>I've never noticed this before. What's going on here?
>
>--
>Ian
>.
>