Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

What is cisco-sccp?

1,680 views
Skip to first unread message

Gábor Hársfalvi

unread,
Apr 3, 2016, 9:40:04 AM4/3/16
to
Hi,

What is it - and why it is in Debian? What is it doing here?

Thanks for the answers!

Sven Hartge

unread,
Apr 3, 2016, 10:00:05 AM4/3/16
to
Gábor Hársfalvi <hga...@gmail.com> wrote:

> What is it - and why it is in Debian? What is it doing here?

I don't see any packages named cisco-sccp and I can't find any packages
containing a file named cisco-sccp in Debian.

Grüße,
Sven.

--
Sigmentation fault. Core dumped.

Gábor Hársfalvi

unread,
Apr 3, 2016, 10:40:04 AM4/3/16
to
Sorry - I mean it for that ->

Sven Hartge

unread,
Apr 3, 2016, 10:50:05 AM4/3/16
to
Gábor Hársfalvi <hga...@gmail.com> wrote:

> Sorry - I mean it for that ->

> 2000/udp Cisco SCCP (Skinny)
> <https://hu.wikipedia.org/w/index.php?title=Skinny_Client_Control_Protocol&action=edit&redlink=1>

Use "netstat -lupn | grep :2000" as root to get the process listening on
UDP port 2000.

Gábor Hársfalvi

unread,
Apr 3, 2016, 11:00:05 AM4/3/16
to
After run that as root nothing message.

Cindy-Sue Causey

unread,
Apr 3, 2016, 11:50:05 AM4/3/16
to
On 4/3/16, Gábor Hársfalvi <hga...@gmail.com> wrote:
>
> 2016-04-03 16:43 GMT+02:00 Sven Hartge <sv...@svenhartge.de>:
>
>> Gábor Hársfalvi <hga...@gmail.com> wrote:
>>
>> > Sorry - I mean it for that ->
>>
>> > 2000/udp Cisco SCCP (Skinny)
>> > <
>> https://hu.wikipedia.org/w/index.php?title=Skinny_Client_Control_Protocol&action=edit&redlink=1
>>
>> Use "netstat -lupn | grep :2000" as root to get the process listening on
>> UDP port 2000.
>
> After run that as root nothing message.


Cisco's own website has a page titled "TCP and UDP Ports Used by Cisco
CallManager 3.3":

http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-communications-manager-callmanager/43881-ccm-tcp-udp-ports.html

That's all I know about it. It was found via an Internet search on
keywords picked from this thread. Just hoping that lead sheds some
light on it or at least leads to something else on their website that
explains why you're seeing what you've found..

PS What I did see but don't know if I'm understanding correctly is
that CSSP / IP Phone reference on that Cisco page. A different quick
search without clicking on any pages shows multiple references to VOIP
and VOIP capable computers. Mentioning that in case that tickles any
memory of using that feature with something. :)

Cindy :)

--
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with duct tape *

Gábor Hársfalvi

unread,
Apr 3, 2016, 3:00:04 PM4/3/16
to
"Is it from /etc/services ?" -> Yes its in there - but there aren't more information about the program which use it :(

And I don't know how I close this port.

2016-04-03 17:47 GMT+02:00 Erwan David <er...@rail.eu.org>:
Le 03/04/2016 16:30, Gábor Hársfalvi a écrit :
> Sorry - I mean it for that ->
>
> 2000/udp      Cisco SCCP (Skinny)

>
>
>
> 2016-04-03 15:51 GMT+02:00 Sven Hartge <sv...@svenhartge.de
> <mailto:sv...@svenhartge.de>>:

>
>     Gábor Hársfalvi <hga...@gmail.com <mailto:hga...@gmail.com>> wrote:
>
>     > What is it - and why it is in Debian? What is it doing here?
>
>     I don't see any packages named cisco-sccp and I can't find any
>     packages
>     containing a file named cisco-sccp in Debian.
>
>     Grüße,
>     Sven.
>
>     --
>     Sigmentation fault. Core dumped.
>
>
Is it from /etc/services ? Even if you have no program using the ports,
the information is here, for whatever use you may have.

Erwan David

unread,
Apr 3, 2016, 3:10:04 PM4/3/16
to
Le 03/04/2016 21:04, Gábor Hársfalvi a écrit :
> How could I know what program uses the port 2000?
>

you can use netstat or lsof -i:2000

But the fact the port is mentionned in /etc/services does not mean at
all it is used.

Gábor Hársfalvi

unread,
Apr 3, 2016, 3:10:04 PM4/3/16
to
How could I know what program uses the port 2000?

2016-04-03 20:56 GMT+02:00 Erwan David <er...@rail.eu.org>:
Le 03/04/2016 20:53, Gábor Hársfalvi a écrit :
> "Is it from /etc/services ?" -> Yes its in there - but there aren't
> more information about the program which use it :(
>
> And I don't know how I close this port.
>

/etc/services is just a static file putting a name on some ports. It
does not mean the port is in use
It may be used by some programs which allow you to designate a port by
name rather than by number.

No worry to have

Martin Smith

unread,
Apr 3, 2016, 3:30:04 PM4/3/16
to
indeed, /etc/services lists just about everything that can run tcp or udp
and the appropriate port(s), but just because it is there does not mean
it is running...

--
Martin

deloptes

unread,
Apr 4, 2016, 2:50:05 PM4/4/16
to
https://supportforums.cisco.com/document/86036/ip-phone-sccp-sip-phone-registration-process-cucm

so if you see this here

grep 2000 /etc/services
cisco-sccp 2000/tcp # Cisco SCCP
cisco-sccp 2000/udp

it just means it is reserved for that protocol. I would wonder if you have
any program running this unless you have hijacked a cisco phone. If you
have done so, it means your question is obsolete. If you have not done so,
it means your question is obsolete.

regards

Lisi Reisz

unread,
Apr 4, 2016, 8:00:07 PM4/4/16
to
On Sunday 03 April 2016 14:34:38 Gábor Hársfalvi wrote:
> Hi,
>
> What is it

https://www.google.co.uk/search?q=cisco-sccp&oq=cisco-sccp&aqs=chrome..69i57j69i60.1299j0j7&sourceid=chrome&ie=UTF-8

> - and why it is in Debian?

It isn't.

https://packages.debian.org/search?keywords=cisco-sccp&searchon=names&suite=all&section=all

> What is it doing here?

It isn't here.

Lisi

Gábor Hársfalvi

unread,
Apr 5, 2016, 12:40:05 AM4/5/16
to
Thanks for the answer.

grep 2000 /etc/services
cisco-sccp 2000/tcp # Cisco SCCP
cisco-sccp 2000/udp
I see that...

And I don't use any program with cisco phone - but I think I have the program installed because of something else.

So how could I get rid of that?

How could I remove program which use that port and close port too?

Thanks

to...@tuxteam.de

unread,
Apr 5, 2016, 3:00:04 AM4/5/16
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Apr 05, 2016 at 06:36:14AM +0200, Gábor Hársfalvi wrote:
> Thanks for the answer.
>
> grep 2000 /etc/services
> cisco-sccp 2000/tcp # Cisco SCCP
> cisco-sccp 2000/udp
> I see that...
>
> And I don't use any program with cisco phone - but I think I have the
> program installed because of something else.
>
> So how could I get rid of that?
>
> How could I remove program which use that port and close port too?

How do you know the port is open?

regards
- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlcDWXwACgkQBcgs9XrR2kYvNwCeM11M9pKet901zSVo++77PMaw
DSEAn1lck/qpXf13UGXgPfflXWkHgHxf
=4KX2
-----END PGP SIGNATURE-----

Andy Smith

unread,
Apr 5, 2016, 3:10:04 AM4/5/16
to
Hi Gábor,

On Sun, Apr 03, 2016 at 09:04:44PM +0200, Gábor Hársfalvi wrote:
> How could I know what program uses the port 2000?

You keep asking "how can I get rid of it?" and "how can I close it?"
and "why is it in Debian?" but you haven't yet shown us why you
think you have something related to cisco-sccp running on your
computer.

You say you did the netstat and/or lsof command suggested earlier.
Its lack of output suggests you have nothing listening on port 2000
TCP and so are not running cisco-ssp software. There's a few reasons
why that could give a false positive, but before we go there we need
to know what prompted you to ask these questions.

So, please be clear: what are you seeing that makes you think you
actually have something related to cisco-ssp running on your
computer?

Cheers,
Andy

--
http://bitfolk.com/ -- No-nonsense VPS hosting

anxio...@gmail.com

unread,
Apr 5, 2016, 3:10:05 AM4/5/16
to
On Tuesday, 5 April 2016 05:40:05 UTC+1, Gábor Hársfalvi wrote:
> Thanks for the answer.
>
>
>
> grep 2000 /etc/services
> cisco-sccp 2000/tcp # Cisco SCCP
> cisco-sccp 2000/udp
>
> I see that...
>

Just because you have a line in /etc/services, it does not mean you have a program installed.

See http://www.penguintutor.com/linux/network-services-ports

Verde Denim

unread,
Apr 5, 2016, 8:20:05 AM4/5/16
to

 

 

Sent from Mail for Windows 10

Just to name-drop a reply –

The Skinny Client Control Protocol (SCCP) is a proprietary network terminal control protocol originally developed by Selsius Systems, which was acquired by Cisco Systems in 1998. SCCP is a lightweight IP-based protocol for session signaling with Cisco Unified Communications Manager, formerly named CallManager.”

 

Google and other sources can give you much more detail…

 

Sorry for the format. I haven’t started on the new box yet…


Virus-free. www.avast.com

Gábor Hársfalvi

unread,
Apr 5, 2016, 12:50:05 PM4/5/16
to
From Zenmap - or something similar portscanner.

Dan Ritter

unread,
Apr 5, 2016, 1:30:06 PM4/5/16
to
On Tue, Apr 05, 2016 at 06:45:17PM +0200, Gábor Hársfalvi wrote:
> >From Zenmap - or something similar portscanner.

Consider running:

# netstat -tulnp

which will, run as root, identify all the listening ports on
your system, UDP, TCP, IPv4 and IPv6, and -- special for root --
tell you the process name as well.

Anything that has a local address of 127.0.0.1 is only offering
services to other processes on the same box.

Processes with a specific local address are listening only on
that IP address -- this is mostly interesting if you have
several networks connected.

Most processes will be listening on every available IP address.

-dsr-

deloptes

unread,
Apr 5, 2016, 2:50:04 PM4/5/16
to
Verde Denim wrote:

>
> Google and other sources can give you much more detail…
>
> Sorry for the format. I haven’t started on the new box yet…
>

He doesn't even understand what we write - this might be the root cause - in
case of google as well.

Lisi Reisz

unread,
Apr 5, 2016, 3:00:05 PM4/5/16
to
On Sunday 03 April 2016 14:34:38 Gábor Hársfalvi wrote:
Gabor -

Now it has been suggested that you may not be understanding the answers we
give, had you thought of trying:
https://lists.debian.org/debian-user-hungarian/

Lisi
0 new messages