For SCAPv1 diameter TCP port in Wireshark Edit > Preferences > Protocols must be altered from standard 3868 to 1812
Latest Updates: port RSS
-
Arif
-
Arif
errdisable_recovery.pdfexplains why our HP-Blade suddenly has disabled port (turn red light from initial green) when connected to a switch.This blade Catalyst 3020 ports must have been in
errdisable/error disable state. First, look for something like1 2 3 4
#show interfaces gigabitethernet 4/1 status Port Name Status Vlan Duplex Speed Type Gi4/1 err-disabled 100 full 1000 1000BaseSX
-
Arif
Network map using nmap
$ nmap -O -sS -p 20-23,3300,80,443 ... Interesting ports on localhost (127.0.0.1): PORT STATE SERVICE 20/tcp closed ftp-data 21/tcp closed ftp 22/tcp closed ssh 23/tcp closed telnet 80/tcp open http 443/tcp closed https 3300/tcp open unknown Device type: general purpose Running: Linux 2.6.X OS details: Linux 2.6.17 - 2.6.25 Network Distance: 0 hops ...
I configured sshd to listen on port 3300, but nmap can’t resolve the type of service in the above sample. (It is found to be open but unknown service)
-
Arif
Port scanner class. An example of usage is as follow where my IP is 192.168.1.10. The upper range for scanning isn’t alive: 192.168.1.11. I hide warnings due to open socket failure which will happen because the IP isn’t alive.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
<?php ini_set( "display_errors", 0); require_once("scanner.class.php"); $ip_address1 = "192.168.1.10"; $ip_address2 = "192.168.1.11"; $my_scanner = new PortScanner($ip_address1, $ip_address2); $my_scanner->set_ports("80"); $results = $my_scanner->do_scan(); foreach($results as $ip=>$ip_results) { echo gethostbyaddr($ip)."\n<blockquote>\n"; foreach($ip_results as $port=>$port_results) { echo "\t".$port." : ".$port_results['pname']." : "; if ($port_results['status']==1){echo "open";} else {echo "closed";}echo "<br />\n"; } echo "</blockquote>\n\n"; } ?>
Results are as follow (it includes developerfusion.com port scan by default (?)):
developerfusion.com
15 : netstat : closed
16 : N/A : closed
17 : qotd : closed
18 : msp : closed
19 : chargen : closed
20 : ftp-data : closed
21 : ftp : closed
22 : ssh : closed
23 : telnet : closed
24 : N/A : closed
25 : smtp : open
80 : www : open
110 : pop3 : closed
3306 : mysql : closed
1337 : N/A : closed
666 : N/A : closedxp-racy.local
80 : www : open
192.168.1.11
80 : www : closed