Mysterous Port 21

[altimit]

I don't know if its just my PS2 (its unmodded with many failed attemps to use the HDD + Edited HDL-Dump to install ExecFTPs) but I get a mysterous port 21 when my PS2 boots. I put this in HDD section because it only does it with the new drivers that the HDD Utilities disc installs. Doesn't do it without the HDD< but it does without memcard (so I know its not ExecFTPs).

Anyway, nmap finds it (when using TCP connect() scan), and when you FTP to it, it times out, and when you telnet to it, nothing happens, and it eventually boots you off.

Here is how I accessed it:

1) Set your computer to IP 192.168.0.2 with gateway of 192.168.0.1 (remove other connections if present)
2) Put Crossover cable between you and PS2
3) Power on PS2 without Disc, with HDD, and sit at the menu ("Browser" "System Configuration")
4) telnet to any ip on port 21.

of course you may be able to access this mysterious port in other ways but what i posted above is basically my setup.

if anyone has any idea what this port could be for please advise.

[skothk]

hhmm, port 21 is an FTP port. I will check this out when i get home tonight.

SKOTHK

[HypERSoniC]

how do you mean you get a mysterious port 21? do you mean your ps2 tries to access port 21 on your pc? or your ps2 opens port 21?

[altimit]

ps2 opens port 21... and doesnt do anything.. its even open now when im on PlayOnline.. also I thought I would add this interesting tidbit.. I did OS Detect via nmap and got this:

C:\Documents and Settings\Lain>nmap -vv 192.168.0.155 -sT -O

Starting nmap 3.70 ( http://www.insecure.org/nmap ) at 2004-09-21 08:50 EasternDaylight Time
Initiating Connect() Scan against sumomo.mshome.net (192.168.0.155) [1660 ports] at 08:50
Discovered open port 21/tcp on 192.168.0.155
Connect() Scan Timing: About 40.03% done; ETC: 08:52 (0:00:44 remaining)
The Connect() Scan took 83.95s to scan 1660 total ports.
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
For OSScan assuming that port 21 is open and port 33914 is closed and neither are firewalled
WARNING: RST from port 21 -- is this port really open?
WARNING: RST from port 21 -- is this port really open?
WARNING: RST from port 21 -- is this port really open?
WARNING: RST from port 21 -- is this port really open?
WARNING: RST from port 21 -- is this port really open?
Insufficient responses for TCP sequencing (0), OS detection may be less accurate

Host sumomo.mshome.net (192.168.0.155) appears to be up ... good.
Interesting ports on sumomo.mshome.net (192.168.0.155):
(The 1659 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
21/tcp open ftp
MAC Address: 00:04:1F:22:44:57 (Sony Computer Entertainment)
Device type: router
Running: Cisco embedded
OS details: Cisco X.25/TCP/LAT Protocol Translator ver 8.2(4)
OS Fingerprint:
T1(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T2(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
T3(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RIPCK=E%UC K=E%ULEN=134%DAT=E)


Nmap run completed -- 1 IP address (1 host up) scanned in 85.422 seconds

also, port 21 kicks you out MUCH quicker when in PlayOnline.

[t0n]

It just seems like its getting the info from the network adapter. Such as (as it mentions) the router info.

Have you tried without the hdd in, but the NA still connected.

This is VERY interesting info. Maybe Sony left the port open as a debug port, for who knows what kind of commands to run through.

I guess some ppl who are good with reading this type of info, and maybe some coders, might be able to help this out a bit more.

[altimit]

It does not do it without the HDD connected. This is one of the things i noticed is that once I got my HDD, the NA would be in use even in the BIOS/Browser. (You can tell by the accelerated fan speed, as well as obvious ways via the network). It is just that I never noticed this port 21.

I just realized anyone should be able to do it, it has nothing to do with my failed attemps to hijack the HDD, because I ended up having to reformat the HDD anyway.

Also, you can access it using any basic crossover from Windows (Typical setup of PS2 -> Computer -> Net via Windows ICS), just access any 192.168.0. based IP (192.168.0.2 and higher) and, when in PlayOnline, remember what you set the Ethernet hostname too, as the playstation will become that.mshome.net, making it easier (you can get more info, such as the nmap thing, only while on PlayOnline (havent tried other online games though).

I mainly posted the Cisco info because maybe it has a connection? Like some sort of debug port as you said. I don't know but it sure is interesting.

[t0n]

cisco has a hand in all routers. i think its a general software in the hardware company, but i could be wrong.

[altimit]

the network adapter should be a reciever not a "router"........