Re: Port Scan for UDP

2001-10-22 Thread Craig McPherson
> Excuse your arrogance, but let me correct you in some points you made! > > First of all nmap does not scan only the services listed in /etc/services, if > you were to have bothered reading the manual before answering you would have > read, and I quote: If you had actually read what I'd wri

Re: Port Scan for UDP

2001-10-22 Thread Craig McPherson
> Excuse your arrogance, but let me correct you in some points you made! > > First of all nmap does not scan only the services listed in /etc/services, if > you were to have bothered reading the manual before answering you would have > read, and I quote: If you had actually read what I'd wri

Re: Port Scan for UDP

2001-10-22 Thread Craig McPherson
> Excuse your arrogance, but let me correct you in some points you made! > > First of all nmap does not scan only the services listed in /etc/services, if > you were to have bothered reading the manual before answering you would have > read, and I quote: If you had actually read what I'd wr

Re: Port Scan for UDP

2001-10-22 Thread Craig McPherson
> Excuse your arrogance, but let me correct you in some points you made! > > First of all nmap does not scan only the services listed in /etc/services, if > you were to have bothered reading the manual before answering you would have > read, and I quote: If you had actually read what I'd wr

Re: Port Scan for UDP

2001-10-22 Thread vdongen
Staffin <[EMAIL PROTECTED]> Date: Sat, 20 Oct 2001 23:27:09 -0500 Subject: Re: Port Scan for UDP > On Sat, Oct 20, 2001 at 09:22:57PM -0700, tony mancill blathered > thusly: > > A good way to find out what process is listening on a port is to > load the > > lsof package

Re: Port Scan for UDP

2001-10-22 Thread vdongen
Staffin <[EMAIL PROTECTED]> Date: Sat, 20 Oct 2001 23:27:09 -0500 Subject: Re: Port Scan for UDP > On Sat, Oct 20, 2001 at 09:22:57PM -0700, tony mancill blathered > thusly: > > A good way to find out what process is listening on a port is to > load the > > lsof package

Re: Port Scan for UDP

2001-10-21 Thread Noah L. Meyerhans
On Sun, Oct 21, 2001 at 09:49:02AM -0600, orly-fu wrote: > First of all nmap does not scan only the services listed in /etc/services, if > you were to have bothered reading the manual before answering you would have > read, and I quote: > "The default is to scan all ports between 1 and 1

Re: Port Scan for UDP

2001-10-21 Thread orly-fu
Excuse your arrogance, but let me correct you in some points you made! First of all nmap does not scan only the services listed in /etc/services, if you were to have bothered reading the manual before answering you would have read, and I quote: "The default is to scan all ports between 1

Re: Port Scan for UDP

2001-10-21 Thread Noah L. Meyerhans
On Sun, Oct 21, 2001 at 09:49:02AM -0600, orly-fu wrote: > First of all nmap does not scan only the services listed in /etc/services, if > you were to have bothered reading the manual before answering you would have > read, and I quote: > "The default is to scan all ports between 1 and

Re: Port Scan for UDP

2001-10-21 Thread orly-fu
Excuse your arrogance, but let me correct you in some points you made! First of all nmap does not scan only the services listed in /etc/services, if you were to have bothered reading the manual before answering you would have read, and I quote: "The default is to scan all ports between 1

Re: Port Scan for UDP

2001-10-21 Thread Jeff Coppock
Wow! Craig...you are the MAN! This explains a number of other questions I had too. Thank you very much! jc Craig McPherson, 2001-Oct-21 10:45 -0500: > I can't believe nobody has answered this correctly yet. UDP is > different than TCP in that it is a stateless protocol, and that means > you

Re: Port Scan for UDP

2001-10-21 Thread Volker Dormeyer
thanks for your explanation. regards, Volker On Sun, Oct 21, 2001 at 10:45:28AM -0500, Craig McPherson <[EMAIL PROTECTED]> wrote: > I can't believe nobody has answered this correctly yet. UDP is > different than TCP in that it is a stateless protocol, and that means > you have to understand a

Re: Port Scan for UDP

2001-10-21 Thread Jeff Coppock
Wow! Craig...you are the MAN! This explains a number of other questions I had too. Thank you very much! jc Craig McPherson, 2001-Oct-21 10:45 -0500: > I can't believe nobody has answered this correctly yet. UDP is > different than TCP in that it is a stateless protocol, and that means > yo

Re: Port Scan for UDP

2001-10-21 Thread Craig McPherson
I can't believe nobody has answered this correctly yet. UDP is different than TCP in that it is a stateless protocol, and that means you have to understand a few things to interpret UDP port scan results correctly. With TCP scans, you get one of three results: OPEN (meaning that the TCP hand

Re: Port Scan for UDP

2001-10-21 Thread Volker Dormeyer
Hi, On Sun, Oct 21, 2001 at 05:47:11PM +0200, Petre Daniel <[EMAIL PROTECTED]> wrote: > > also netstat -n -p -t --listening | grep ":PORT" sure, but it shows you only tcp connections. regards, Volker > VD> You can also use "netstat -pan" to find out which process is listening on > VD> which p

Re: Port Scan for UDP

2001-10-21 Thread Volker Dormeyer
thanks for your explanation. regards, Volker On Sun, Oct 21, 2001 at 10:45:28AM -0500, Craig McPherson <[EMAIL PROTECTED]> wrote: > I can't believe nobody has answered this correctly yet. UDP is > different than TCP in that it is a stateless protocol, and that means > you have to understand

Re: Port Scan for UDP

2001-10-21 Thread Craig McPherson
I can't believe nobody has answered this correctly yet. UDP is different than TCP in that it is a stateless protocol, and that means you have to understand a few things to interpret UDP port scan results correctly. With TCP scans, you get one of three results: OPEN (meaning that the TCP han

Re: Port Scan for UDP

2001-10-21 Thread Volker Dormeyer
Hi, On Sun, Oct 21, 2001 at 05:47:11PM +0200, Petre Daniel <[EMAIL PROTECTED]> wrote: > > also netstat -n -p -t --listening | grep ":PORT" sure, but it shows you only tcp connections. regards, Volker > VD> You can also use "netstat -pan" to find out which process is listening on > VD> which

Re: Port Scan for UDP

2001-10-21 Thread Javier Coso Gutierrez
Hi! Take a look at "/etc/inetd.conf". There are some services you are looking for. Try to comment thoose services and make a restart of the "inetd" daemon. (Something as `/etc/init.d/inetd stop` & `/etc/init.d/inetd start') Bye -- -

Re: Port Scan for UDP

2001-10-21 Thread Volker Dormeyer
Hi, On Sat, Oct 20, 2001 at 09:22:57PM -0700, tony mancill <[EMAIL PROTECTED]> wrote: > On Sat, 20 Oct 2001, Marc Wilson wrote: > > > Adding or removing lines in /etc/services doesn't open or close ports... > > this is a common misconception. Removing what's listening on a particular > > port is

Re: Port Scan for UDP

2001-10-21 Thread Javier Coso Gutierrez
Hi! Take a look at "/etc/inetd.conf". There are some services you are looking for. Try to comment thoose services and make a restart of the "inetd" daemon. (Something as `/etc/init.d/inetd stop` & `/etc/init.d/inetd start') Bye --

Re: Port Scan for UDP

2001-10-20 Thread Jeff Coppock
tony mancill, 2001-Oct-20 21:22 -0700: > On Sat, 20 Oct 2001, Marc Wilson wrote: > > > On Sat, Oct 20, 2001 at 07:18:25PM -0700, Jeff Coppock wrote: > > > Just for grins, I removed every udp listing in > > > /etc/services and restarted inetd and the scan came back the > > > same. I figure this is

Re: Port Scan for UDP

2001-10-20 Thread Ben Staffin
On Sat, Oct 20, 2001 at 09:22:57PM -0700, tony mancill blathered thusly: > A good way to find out what process is listening on a port is to load the > lsof package and use "lsof -i" (as root so that you'll see everything). I find that fuser is more convenient at times - fuser -v -n udp returns th

Re: Port Scan for UDP

2001-10-20 Thread tony mancill
On Sat, 20 Oct 2001, Marc Wilson wrote: > On Sat, Oct 20, 2001 at 07:18:25PM -0700, Jeff Coppock wrote: > > Just for grins, I removed every udp listing in > > /etc/services and restarted inetd and the scan came back the > > same. I figure this is normal, but if someone can confirm this > > behavi

Re: Port Scan for UDP

2001-10-20 Thread Marc Wilson
On Sat, Oct 20, 2001 at 07:18:25PM -0700, Jeff Coppock wrote: > Just for grins, I removed every udp listing in > /etc/services and restarted inetd and the scan came back the > same. I figure this is normal, but if someone can confirm this > behaviour, I'd really appreciate it. Adding or removing

Re: Port Scan for UDP

2001-10-20 Thread Volker Dormeyer
Hi, On Sat, Oct 20, 2001 at 09:22:57PM -0700, tony mancill <[EMAIL PROTECTED]> wrote: > On Sat, 20 Oct 2001, Marc Wilson wrote: > > > Adding or removing lines in /etc/services doesn't open or close ports... > > this is a common misconception. Removing what's listening on a particular > > port i

Re: Port Scan for UDP

2001-10-20 Thread Jeff Coppock
tony mancill, 2001-Oct-20 21:22 -0700: > On Sat, 20 Oct 2001, Marc Wilson wrote: > > > On Sat, Oct 20, 2001 at 07:18:25PM -0700, Jeff Coppock wrote: > > > Just for grins, I removed every udp listing in > > > /etc/services and restarted inetd and the scan came back the > > > same. I figure this i

Re: Port Scan for UDP

2001-10-20 Thread Ben Staffin
On Sat, Oct 20, 2001 at 09:22:57PM -0700, tony mancill blathered thusly: > A good way to find out what process is listening on a port is to load the > lsof package and use "lsof -i" (as root so that you'll see everything). I find that fuser is more convenient at times - fuser -v -n udp returns t

Re: Port Scan for UDP

2001-10-20 Thread tony mancill
On Sat, 20 Oct 2001, Marc Wilson wrote: > On Sat, Oct 20, 2001 at 07:18:25PM -0700, Jeff Coppock wrote: > > Just for grins, I removed every udp listing in > > /etc/services and restarted inetd and the scan came back the > > same. I figure this is normal, but if someone can confirm this > > behav

Re: Port Scan for UDP

2001-10-20 Thread Marc Wilson
On Sat, Oct 20, 2001 at 07:18:25PM -0700, Jeff Coppock wrote: > Just for grins, I removed every udp listing in > /etc/services and restarted inetd and the scan came back the > same. I figure this is normal, but if someone can confirm this > behaviour, I'd really appreciate it. Adding or removing