Why is port 427 open?

80 HTTP (Web) RFC 2068, .Mac, Sherlock, QuickTime Installer

427 SLP (service location)
 
(from AFP548.com)
Joel resonded: You are correct that the SLP daemon is causing this traffic. You are most likely generating this packets whenever you fileshare. By selecting "local network" in the "Go to" window to connect to a server, you are instigating an SLP lookup to search for services available to you on the network. This should not be a huge waste of bandwith, especially on a 100-base network. However, to completely disable this from happening, you can probably remove slpd from /usr/sbin/slpd. (Or, comment it out of /etc/services.) That will certainly stop this from happening. I don't know how that will impact your system, but you should be ok.

239.255.255.235 is the multicast address that SLP uses to try and contact other SLP devices.

http://www.afp548.com/Questions/20020531.html

---

some references

http://www.opendoor.com/doorstop/ports.html
http://www.iana.org/assignments/port-numbers

find out what ports are doing this in the terminal:

% cat /etc/services | grep 427
svrloc 427/tcp #Server Location
svrloc 427/udp #Server Location
 
Check in /etc/services (using a terminal), these are the ones that MacOSX uses, its a long list. Only ones that are uncommented are currently being used.
 
Yeah I check services first, but I was wondering why it was necessary to have that port open, since I've never opened it in concert with Apache before....
 
Back
Top