Please let me know Regarding Port Scan

myramkumar · #1 (**permalink**) 05-06-2007

Can any one please let me know below ones

1) How to Perform the Port Scan in Solaris Environment and how to block the unwanted Ports.

2) How to know whether particular Port is listning the requests or not?

Thanks
Ramkumar.B

sumitpandya · #2 (**permalink**) 05-07-2007

Try "nmap" to scan for open port. You can use nmap to verify about your firewall policy as well

The ancient and widely ported tool for configuring local-host firewall is "ipf". Solaris 10 System Administrator Collection ->> System Administration Guide: IP Services ; provide good write-up to achieve that. Go to URL http://docs.sun.com/app/docs/doc/816-4554/6maoq023u

You may look into a tool "armor" URL http://www.spitzner.net/armoring.html

grial · #3 (**permalink**) 05-07-2007

Quote:

Originally Posted by myramkumar

2) How to know whether particular Port is listning the requests or not?

I use "lsof" for that. Though, you may use "netstat" also.

Regards.

sysgate · #4 (**permalink**) 05-07-2007

I've used it few times on a BSD server, the command was :
nmap -v -A -P0 10.10.1.1 (replaced by your actual IP) and it gives pretty good output like :

Quote:

Host my.host.tld (IP goes here) appears to be up ... good.
Interesting ports on my.host.tld (IP goes here):
Not shown: 1670 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp ProFTPD 1.2.10
22/tcp open ssh OpenSSH 4.2p1 (FreeBSD 20050903; protocol 1.99)
25/tcp open smtp qmail smtpd
53/tcp open domain
80/tcp open http Apache httpd 2.0.54
106/tcp open pop3pw poppassd
443/tcp open ssl/http Apache httpd 2.0.54
465/tcp open ssl/ssl OpenSSL
3306/tcp open mysql MySQL (unauthorized)
8443/tcp open http Apache httpd 1.3.33 ((FreeBSD) mod_ssl/2.8.22 OpenSSL/0.9.7e PHP/5.0.5)
No exact OS matches for host (If you know what OS is running on it, see http://www.insecure.org/cgi-bin/nmap-submit.cgi).
TCP/IP fingerprint:

+ much more....

ranj@chn · #5 (**permalink**) 05-08-2007

What command similar to nmap for AIX 5.3? Our box didnt have nmap.

bishweshwar · #6 (**permalink**) 05-17-2007

In my machine when i run nmap...it says command not found.

Is there any other way to the get the job done.

sysgate · #7 (**permalink**) 05-17-2007

http://aixpdslib.seas.ucla.edu/packages/nmap.html

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Port Scan Attack Detector 2.1.2 (Default branch)	iBot	Software Releases - RSS News	0	04-04-2008 12:00 PM
port scan shell script	nrbhole	Shell Programming and Scripting	3	01-31-2008 11:28 AM
Port Scan Attack Detector 2.1.1 (Default branch)	iBot	Software Releases - RSS News	0	01-26-2008 10:10 AM
unix program that can port scan a c block of ips for proxies	user	UNIX for Dummies Questions & Answers	1	07-11-2005 02:01 PM
IP Name scan	nicke30	UNIX for Dummies Questions & Answers	2	07-18-2001 05:32 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by