Could you please confirm whether this is port 950 TCP or UDP..
also, what response comes back.. is the port open on the server or not ? If it is, you can use netstat -anpA on a *nix box or TCPview (
www.sysinternals.com
) on a winbloze box.
If you still cant figure out what it is.. run nmap with version detection on the port
nmap -sV -p950 <server-ip> -v
make sure you get the latest version of nmap (3.70 at the time of writing this) from
www.insecure.org
Last case, sniff the traffic going to and from that port
tcpdump -w wierd_stuff -nnXs 1545 port 950
should do the trick..
Cheers,
