I have a clustered instance of SQL Server 2008 R2 (64-bit). My information security group contacted me about a previously unnoticed open port: 52849. The port is attached to the SQL Server process on my machine, which is PID 1004:
C:\>netstat -ano | findstr 52849 TCP 0.0.0.0:52849 0.0.0.0:0 LISTENING 1004 TCP [::]:52849 [::]:0 LISTENING 1004
C:\>tasklist | findstr sql
sqlbrowser.exe 2624 Services 0 2,368 K
sqlwriter.exe 2764 Services 0 9,708 K
sqlservr.exe 1004 Services 0 62,050,528 K
I don't see the port mentioned in my error log. It isn't the port the instance is listening on. It isn't the service broker port.
Does anyone have a good way to track this down?
Cheers,
Adam
Adam