hi all perlers and admins,
i was wandering how my system works sometimes. Things happend, that let me
suppose that someone is hacking me. so the first thing i was do is to check
up all ports. I build up a routine in perl:
use Socket;
for($port=1;$port<=9999;$port++)
{
if(open_TCP(F, "localhost", $port) == undef)
{
print "... Verbindung zum Port $port fehlgeschlagen\r";
}
else
{
print "PORT: $port offen
\n";
}
}
sub open_TCP
{
my($FS, $dest, $port) = @_;
my $proto = getprotobyname('tcp');
socket($FS, PF_INET, SOCK_STREAM, $proto);
my $sin = sockaddr_in($port, inet_aton($dest));
connect($FS, $sin) || return undef;
my $old_fh = select($FS);
$| = 1;
select($old_fh);
1;
}
now, the output shows on my system:
C:\>porttest.pl
PORT: 7 offen
PORT: 9 offen
PORT: 13 offen
PORT: 17 offen
PORT: 19 offen
PORT: 135 offen
PORT: 1028 offen
PORT: 1029 offen
I want to ask you, if you know what is on port 1028 and 1029 ??? I cant find
enything about "well known ports" for 1028 and 1029... maybe this is the
troyaner ?
by the way... is it possible to close open ports with perl ?
thanx youz very much
Kris
_______________________________________________
Perl-Win32-Web mailing list
[EMAIL PROTECTED]
http://listserv.ActiveState.com/mailman/listinfo/perl-win32-web
