AnsweredAssumed Answered

Multiple probes using same port?

Question asked by WB_DeFord on Mar 28, 2017
Latest reply on Mar 30, 2017 by WB_DeFord

We found one of our Windows robots with multiple probes (cdm, dirscan, processes, logmon, ntservices, ntevl) all connecting to port 48017.  Our Windows admin looked at netstat and found it showing all these probes with that port.

 

The probes seemed to function OK, except I could not open their configs in IM.

 

We changed the first probe port to 48018 and they all got their own ports, but when we changed it back, they went back to 48017 again.

 

Anyone ever seen this behavior before?  If the OS allows each probe to believe it has the same port, is UIM OK with that?

Outcomes