Re: this is a port scan, right?
From: Volker Birk (bumens_at_dingens.org)
Date: 08/03/05
- Previous message: J.Smith: "How secure is ADS NAS kit?"
- In reply to: Wolfgang.Schelongowski_at_gmx.de: "Re: this is a port scan, right?"
- Next in thread: Yortuk Festrunk: "Re: this is a port scan, right?"
- Reply: Yortuk Festrunk: "Re: this is a port scan, right?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 3 Aug 2005 08:39:58 +0200
In comp.security.misc Wolfgang.Schelongowski@gmx.de wrote:
> Volker Birk <bumens@dingens.org> writes:
> >In comp.security.misc Wolfgang.Schelongowski@gmx.de wrote:
> >> IIRC HTTP uses TCP/IP only, not UDP.
> >vb@elk:~ $ grep ^http\ /etc/services
> >http 80/udp www www-http # World Wide Web HTTP
> >http 80/tcp www www-http # World Wide Web HTTP
> >vb@elk:~ $
> Quite a lot of services have reserved ports for both tcp and udp ...
> >But most people do use TCP for HTTP.
> [comp.infosystems.www.servers.misc re-added to solicit comments]
> ... but Apache (at least in the standard config) doesn't listen to
> incoming udp.
Having a look to RFC 2616, I stand corrected:
----------------------------- snip -----------------------------------
HTTP communication usually takes place over TCP/IP connections. The
default port is TCP 80 [19], but other ports can be used. This does
not preclude HTTP from being implemented on top of any other protocol
on the Internet, or on other networks. HTTP only presumes a reliable
transport; any protocol that provides such guarantees can be used;
the mapping of the HTTP/1.1 request and response structures onto the
transport data units of the protocol in question is outside the scope
of this specification.
----------------------------- snap -----------------------------------
"HTTP only presumes a reliable transport" - that is clear. UDP? No way.
Hm... interesting, that in nearly every operating system the file
services contains an entry for http/udp. Searching:
http://www.google.de/search?q=http+udp+site%3Aw3.org
we can read many discussions, wether it could be a good idea to use
UDP also, especially in the HTTP/NG project. But those efforts didn't
make it into the standard.
Yours,
VB.
-- Irony has to be marked as clear as possible. Please use asterisks AND underlines AND <irony>-tags to make that clear - and don't forget, that closing </irony>-tags are needed to compensate any sarcasm.
- Previous message: J.Smith: "How secure is ADS NAS kit?"
- In reply to: Wolfgang.Schelongowski_at_gmx.de: "Re: this is a port scan, right?"
- Next in thread: Yortuk Festrunk: "Re: this is a port scan, right?"
- Reply: Yortuk Festrunk: "Re: this is a port scan, right?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|