An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).

Published Feb 4, 2000 · Updated Aug 1, 2024 · Assigned by mitre