[svlug] Open port... what service?

[Andrew Fife]

Holt Sorenson wrote: 

>Another option is to use nmap as it has had service probing for a while.

If you try nmap, keep in mind that by default is scans aproximately 1,700
tcp & udp ports so you would need to check that the port in question is on
that default list, or use the -p command to probe the port directly.  

>amap is one of the utilities that pioneered service probing, so you could
give that a go. 

AFAIK amap is probably the best choice because is uses techniques that
probe for specific services rather than just sending blank packets to
ports, which made it a very valuable tool for probing udp services that
might not otherwise respond.  However, it is possible that amap's pool of
signatures does not include the service running the port in question.   

Lastly, keep in mind that application and OS fingerprinting is not an
exact science. 

--
Andrew Fife
Untangle - The Open Source Network Gateway
www.untangle.com/download

650.425.3327 desk
415.806.6028 cell 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.svlug.org/archives/svlug/attachments/20080514/2c14bba3/attachment.htm