nmap testing UDP ports
From: Ray Westphal (westphal2002@charter.net)
Date: 03/21/03
- Previous message: Barry Margolin: "Re: Bind report"
- Next in thread: Andrew Yeomans: "Re: nmap testing UDP ports"
- Reply: Andrew Yeomans: "Re: nmap testing UDP ports"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: westphal2002@charter.net (Ray Westphal) Date: 21 Mar 2003 08:45:50 -0800
Hello Everyone.
nmap 3.00 running on AIX 4.3.3
I'm experimenting with nmap to test UDP ports on a server. If the
ports are not open, we have an application problem and I must notify
the application owners. We have been using SNMP to monitor the
udp.udp.table objects. Here is normal output. The SNMP port 161 is
obvious. The "app" ports are 1000 and 1001 and are just for an
example.
udp.udpTable.udpEntry.udpLocalPort.0.0.0.0.161 : INTEGER: 161
udp.udpTable.udpEntry.udpLocalPort.aa.bb.cc.dd.10000 : INTEGER: 1000
udp.udpTable.udpEntry.udpLocalPort.aa.bb.cc.dd.10001 : INTEGER: 1001
Now here is the output when the application is shutdown:
udp.udpTable.udpEntry.udpLocalPort.0.0.0.0.161 : INTEGER: 161
In both cases nmap outputs the same thing. It appears the ports are
still available. I use the following command (enX is the interface
X=0-4);
nmap -e enX -p 1000,1001 -P0 -sU -vv host
Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Host host (aa.bb.cc.dd) appears to be up ... good.
Initiating UDP Scan against host (aa.bb.cc.dd)
The UDP Scan took 12 seconds to scan 2 ports.
Adding open port 1001/udp
Adding open port 1000/udp
Interesting ports on host (aa.bb.cc.dd):
Port State Service
1000/udp open unknown
1001/udp open unknown
Nmap run completed -- 1 IP address (1 host up) scanned in 12 seconds
What am I doing wrong?
Thanks in advance,
Ray
- Previous message: Barry Margolin: "Re: Bind report"
- Next in thread: Andrew Yeomans: "Re: nmap testing UDP ports"
- Reply: Andrew Yeomans: "Re: nmap testing UDP ports"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
