Discovery Ports

[Ankush13]

Hi guys,

So the other day I was browsing the community and came across Ports of No Joy... and Anatomy of a Discovery... and this is where it really became confusing.

As per discovery wiki, port used for windows discovery is 135 and DCOM range but SlightlyLoony mentions port 139 and 445 as well. (Discovery Troubleshooting - Port Scanning - ServiceNow Wiki).

So, which is it? Looking at the dates on Loony's posts, I am thinking that this 'was' the case and not 'is' the case. What do you guys think.

Thanks,

Ankush Latawa

[doug_schulze]

If you take a look at discovery definition > port probes and see the items that are triggered for a Configuration item (CI) discovery.   You would see that its WMI (135) and WINS - Netbios (137) that we are checking.   Its always best to check whats actually happening on your instance!

[Ankush13]

Exactly. This is what I knew and have been following until I came across Loony's post. Wiki doesn't tell us that ports 139 and 445 are being used. Even for troubleshooting, the article suggests port 135 for windows. So I think the answer is NO, it doesn't use 139 and 445 for windows discovery. Thanks Doug.

-AKL

[doug_schulze]

Yes the Good Professors posts can be thought of as the archives..If you start from the beginning you can see basically the historical record of this awesome tool!