Re: Most important UDP ports?

Hi,

You only have time constraints if you test UDP ports looking for ICMP replies. However if you actually look for UDP services with UDP protocols your tests can fly! I suggest you look into Unicornscan and other tools which will test UDP ports with known UDP protocols on the standard ports where you may find them. This doesn't help in finding "unknown" services or those on strange ports but neither will scanning only known service ports looking for ICMP replies. On the other hand, if the servers are configured correctly and don't respond with ICMP then at least you can still find active services.

Sincerely,
-pete.


Florencio Cano wrote:
Hi,
I have read some discussions that explain why UDP scanning is so slow.
Now, I want to scan a network but I have time constrains. Which, for
example, 10 UDP ports will you scan if you had a limited quantity of
time to perform the scan?

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------




------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • a UDP Exception Problem of Windows Firewall
    ... I guess there must be a kind of problem with UDP exceptions of windows ... As I know, if I register some program to exception list of firewall, all of ... But, In my test case, TCP ports used by exception program might be opened, ... while UDP ports never be opened. ...
    (microsoft.public.windowsxp.embedded)
  • Re: Allow all "high UDP" or not ?
    ... > My firewall is McAfee Desktop Firewall. ... > a so large range of UDP ports open? ...
    (comp.security.firewalls)
  • TCP/IP filter & SMTP
    ... I have enabled TCP/IP filter on all addresses on my web server. ... I've got everything working except the UDP filter. ... That doesn't seem right because I've got SMTP enabled on TCP, ... If I enable all UDP ports, ...
    (microsoft.public.inetserver.iis.security)
  • Re: TCP/IP Filtering Problem
    ... Ensure that you allow UDP 53 inbound and outbound. ... due to it being dependent on DNS. ... Also, sending mail with the SMTP server does not work, and adds ... > When I allow all UDP ports, ...
    (microsoft.public.inetserver.iis.security)
  • RE: Locking down UDP ports
    ... lsof |grep -i UDP ... and if you don't have lsof (why linux distributions don't install it by default??????) try on www.rpmfind.net ... Subject: Locking down UDP ports ...
    (Security-Basics)