Sample Trace:
No Trace available
Description:
TCP/UDP port 0, is a reserved port, it should not be seen in the real world. This port sometimes is used in networking programming, where the system is used to dynamically assign the next available port, though this does not work in windows programming.
Causes:
The places you will often see this, will be in either firewall logs, or summaries of firewall logs. This is often due to the fact that the software has tried to standardize the output. This is also compounded with the fact that there is an ICMP response 0, which is an echo reply.
You may also see this port due to a vulnerability that would cause a Checkpoint Firewall-1 to crash.
Suggestions:
If you are running Checkpoint Firewall-1, make sure you have upgraded, to a newer version. If you are running a program that is creating packets destined for this port, you should contact the vendor regarding this, as you should not see this.
If it's within the firewall logs, or summaries you can contact the developers or vendors to add this information, but this is not always a critical issue for these organizations.
Links:
-
OSVDB - Information on vulnerability that caused a Checkpoint Firewall-1 to crash.
-
About - Information regarding Port 0 from About.com.
