postIt » port

For SCAPv1 diameter TCP port in Wireshar …

Arif — Tue, 03 Aug 2010 03:28:53 +0000

For SCAPv1 diameter TCP port in Wireshark Edit > Preferences > Protocols must be altered from standard 3868 to 1812

errdisable_recovery.pdf explains why ou …

Arif — Mon, 05 Apr 2010 03:01:53 +0000

errdisable_recovery.pdf explains why our HP-Blade suddenly has disabled port (turn red light from initial green) when connected to a switch.

This blade Catalyst 3020 ports must have been in errdisable/error disable state. First, look for something like

#show interfaces gigabitethernet 4/1 status
 
Port    Name       Status       Vlan       Duplex  Speed Type
Gi4/1              err-disabled 100          full   1000 1000BaseSX

Network map using nmap $ nmap -O -sS -p …

Arif — Mon, 01 Mar 2010 08:56:29 +0000

Network map using nmap

$ nmap -O -sS -p 20-23,3300,80,443
...
Interesting ports on localhost (127.0.0.1):
PORT    STATE  SERVICE
20/tcp  closed ftp-data
21/tcp  closed ftp
22/tcp  closed ssh
23/tcp  closed telnet
80/tcp  open   http
443/tcp closed https
3300/tcp  open   unknown
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.17 - 2.6.25
Network Distance: 0 hops
...

I configured sshd to listen on port 3300, but nmap can’t resolve the type of service in the above sample. (It is found to be open but unknown service)

Port scanner class.

Arif — Mon, 01 Mar 2010 02:39:00 +0000

Port scanner class. An example of usage is as follow where my IP is 192.168.1.10. The upper range for scanning isn’t alive: 192.168.1.11. I hide warnings due to open socket failure which will happen because the IP isn’t alive.


	ini_set( "display_errors", 0);
	require_once("scanner.class.php");
	$ip_address1 = "192.168.1.10";
	$ip_address2 = "192.168.1.11";
	$my_scanner = new PortScanner($ip_address1, $ip_address2);
 
	$my_scanner->set_ports("80");
 
	$results = $my_scanner->do_scan();
 
	foreach($results as $ip=>$ip_results) {
		echo gethostbyaddr($ip)."\n\n";
 
 
		foreach($ip_results as $port=>$port_results) {
			echo "\t".$port." : ".$port_results['pname']." : ";
			if ($port_results['status']==1){echo "open";}
			else {echo "closed";}echo "
\n";
		}
		echo "
\n\n";
	  }
 
?>

Results are as follow (it includes developerfusion.com port scan by default (?)):

developerfusion.com

15 : netstat : closed
16 : N/A : closed
17 : qotd : closed
18 : msp : closed
19 : chargen : closed
20 : ftp-data : closed
21 : ftp : closed
22 : ssh : closed
23 : telnet : closed
24 : N/A : closed
25 : smtp : open
80 : www : open
110 : pop3 : closed
3306 : mysql : closed
1337 : N/A : closed
666 : N/A : closed

xp-racy.local

80 : www : open

192.168.1.11

80 : www : closed