Networking :: Port Scan Can Reveal What Os Is Being Used?
Oct 18, 2010Is it possible that a port scan can reveal what os is being used?
View 2 RepliesIs it possible that a port scan can reveal what os is being used?
View 2 RepliesI installed F14 on a friend's computer a couple of weeks ago. Today she called me saying that her ISP called her telling her they'd have to cancel her internet if she didn't fix whatever virus was sending port scans to edu domains that they'd gotten complaints from. I thought "well, there's a first"... I've got ssh to her computer, so i shelled in and ran a couple of commands, but i really know very little about how to investigate this kind of stuff.
She's directly connected to her cable modem via cat-5; but she does have a wireless card installed --she just doesn't use it, nor a router, afaik, nor as far as i'd seen when i setup her printer. I googled a bit, and ran a couple of commands, and 1 of them was interesting because it APPEARS that her wireless card is ON and the eth0 is OFF? Perhaps someone will know how to read this output better than i, and the output of the other command that i ran. Also, does anyone know any other ways to properly investigate this one? FWIW, she does use transmission to download torrents.
Anyway, here's the commands i ran:
Code:
[root@localhost ~]# ip link show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00.
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000 link/ether 00:21:97:9b:70:29 brd ff:ff:ff:ff:ff:ff
3: wlan0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000 link/ether 00:1e:e5:9c:b6:8a brd ff:ff:ff:ff:ff:ff [root@localhost ~]#
I just ran the port scanner from the Network Tools utility a few times within a few minutes (see screenshots). How can there be different ports open each time? I know that port 631 is for CUPS, but what about the other ones? Could someone help me understand what is going on, or at least point me in the direction of some good information?
View 8 Replies View RelatedI want to do a simple port redirect, i.e. whatever comes trough whatever interface on port AAAA will get redirected to port BBBBI thought that iptables -t nat -I PREROUTING --source 0/0 --destination 0/0 -p tcp --dport AAAA -j REDIRECT --to-ports BBBBhowever it doesn't work, e.g. nc -v -w2 -z localhost AAAA gives:
nc: connect to localhost port AAAA (tcp) failed: Connection refused
while
nc -v -w2 -z localhost BBBB
[code]....
This is the difference in the output of a port scan using Zenmap on the same system with UFW turned off and then with it turned on. It is obvious that UFW works.
View 6 Replies View RelatedI installed squeeze on my eeepc 1015ped and downloaded the correct firmware-brcm80211 drivers but every time I scan for my network using iwconfig wlan0 scan or wicd, my computer completely freezes. I previously had a solid install running xmonad, and wicd was working like a charm (using the same broadcom driver) but i tinkered too much with it and decided to do a fresh install. I haven't quite run into a problem like this before.
View 2 Replies View RelatedWhen I use the following command:
ssh user@ssh_server -L 5500:localhost:5500 -p 22
everything works fine. I can log in, and local port forwarding is done. Otherwise when I use the command:
ssh user@ssh_server -R 5500:localhost:5500 -p 22
I get an error "remote port forwarding failed for listen port 5500". However when I try remote port forwarding in WinXP by use of putty there is no problem...
I'm trying to use iptables in order to forward all the incoming packets for port 5555 to port 5556 on the same server (192.168.2.101).
I wrote the following commands:
iptables -A PREROUTING -t nat -i any -p tcp --dport 5555 -j DNAT --to 192.168.2.101:5556
iptables -A FORWARD -p tcp -m state --state NEW -d 192.168.2.101 --dport 5556 -j ACCEPT
I'm using a Debian servers, as router/firwall.. I've two ethernet interfaces into the server, one for wan and one for lan. The i use SNAT so my LAN clients can access the internet throgh the debian router. That is working... Now i want to be able to access servers on the LAN site from the WAN site, and i wanna use port address translation (PAT). I have a FTP server running on a lan server, so i'm trying to portward port 21.
iptables -t nat -A PREROUTING -p tcp -i eth1 -d (WANIP) --dport 21 -j DNAT --to 192.168.1.2:21
When people try to access my FTP from the WAN site, they are redirected to the local FTP server, and they are promted for crendentials, but when the credentials are typed, and the local ftp server should answer the wan request, the connections dies.
The wan clients are being promted for credentials, so they are redirected to the local lan server, but after that the connections dies, so i think there is some kind of nat problem, when the local lan server is trying to respond to the wan request..
Here i my iptables script:
#flush table
iptables -F
#input regler
[code]....
I make an application on GNU/Linux which listening on a MULTICAST stream, so I open my unconnected socket, bind it on a MULTICAST address and a port, join the multicast group with the "setsockopt (IP_ADD_MEMBERSHIP)", then I receive datagram on my socket.
Now I've two different instances of the same application that run with their own MULTICAST address and port. And what I found strange is that, after a misconfiguration, I switch the ports, for example:
Emitting on 225.0.0.1/23451 and 225.0.0.2/23452
Receiving on 225.0.0.1/23452 and 225.0.0.2/23451
And my receiving part doesn't care about the MULTICAST address, it looks like the socket is listening on the port number only! I mean that the receiver [225.0.0.1/23452] take its datagrams from emitter [225.0.0.2/23452] and vice-versa!
I want to set my ip as static and port forward it through a specific port can anyone help me with this im using ubuntu 10 with 64 bit OS
View 1 Replies View RelatedHow can i redirect data received on a port to another port located in a different machine? Can i do this using IPTABLES ?
View 4 Replies View RelatedI have a mail server on which I would like to block port 25 on my eth0 for everyone except our external spam filter. the problem is that I want our users to be able to connect via port 10025 which is forwarded to port 25, which then is blocked...
View 2 Replies View RelatedI had to add them to my firewall script when I installed openvpn on my dd-wrt router:
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I INPUT -i tun0 -j REJECT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
what should I add/change to set up port forwarding of port 1000 to ip 192.168.1.200. also how to get the answer sent by 192.168.1.200 follow the same route used by the data received through port forwarding.
i have an embbeded hardware that uses bootp for booting from a Network Managemnt Host (NMH)on the same ethernet. The embedded hardware has both kind of ports i.e ethernet as well as E1/T1. I would like ask, what do i require to establish a communication-link between the embedded hardware and the NMH throuh E1/T1 ports of embedded hardware, so as to make it boot through from E1/T1. Further, NMH possesses only ethernet port. Just to refine my questions i'd like to know what additions do i need to do on my NMH , like may be i have to put an E1/T1 port or is it possible that the E1/T1 port can be directly connected to an ethernet port on the other host.
pardon me if i am not making absolute sense here as my knowledge is limited on Layer 1 and layer 2.
how to access networking port and run scripts on that port so as to gain access of remote machine.is that possible through command prompt or through software.
i kno ip address of my frnd who is chattin with me .okay.i want to run an application on his computer .i came to kno tht we can run script o through port
I have a netbook with a onboard WIFI card(Broadcom 5727(rev 01)) and a Realtek RTL8191S USB WIFI donge. Both work.
My problem is; I can't get these to scan for AP's running on channel 12 and 13.
Is there a way to fix this?
Distro: Slackware 13.1
Kernel: 2.6.33.4-smp
To use my home broadband, I am connected to a wireless router. How can I scan for other devices connected to that router? I am using Ubuntu 10.10.Is there both a GUI and CLI method?The IP of my router is URL... Please rename this thread title from 'How can I scan for other devices connected to that router?' to 'How can I scan for other devices connected to my router?
View 4 Replies View RelatedI installed ZTE MF 626 modem in my F10 with kernel 2.6.27.12-170, i run usb_modeswitch and so far things happened normally. Watching through /var/log/messages it says that F10 detects two port device for this modem: ttyUSB1 and ttyUSB2, and in the sequence it disable port ttyUSB1 BUT Network Manager still set this port.I mean, when i connect via wvdial appointing to ttyUSB2 i get connection, but Network Manager fails to do it appointing to ttyUSB1. How to change device port in Network Manager?
View 1 Replies View Relatedscan my network and check for files within a LAN, in a mixed Linux and Windows environment.Something like LAN spy for Windows. Is there a package or program like that for Linux?
View 2 Replies View RelatedI have a Lexmark interpret S405 all in one. I got it to work as a wireless printer with the downloads provided by Lexmark. I installed simple-scan (sane) to enable scanning. Simple scan works, since it sees another all in one printer in our house and is able to scan. In addition, simple-scan does work on the Lexmark when I hook it up with a USB cable. HOWEVER, for some reason simple-scan does not see my Lexmark, despite the fact that it is seen as a wireless printer. So, the following discrepancy is present
a) My Lexmark is recognized by my computer as a wireless printer
b) Simple-scan does work, since it recognizes and scans another all in one and it does work with my Lexmark when connected with a USB cable
c) Nevertheless Simple-scan does not recognize my Lexmark all in one wirelessly.
My question to this distinguished form is: How can I make simple-scan recognize my Lexmark wireleslsy?
What id the way you scan for samba shares through command line, do i need samba to be installed to do it
View 7 Replies View RelatedI just started messing with the networking tools in Linux, and I've discovered that when I run an intense scan in zenmap on 192.168.1.1-254, the network crashes. By network crash I mean - All clients on the network lose connectivity.
View 12 Replies View Relatedgenerally whenever there is a wifi connection available fedora will detect and i can establish the connection but today i am not able to see any such wireless network available. I am in a wifi accessible area and i need to know how this can be rectified. i tried iwlist scan in the terminal but that doesnt seem to work
View 1 Replies View RelatedI have installed a new network multifunctional device Samsung CLX-3185FN using the drivers provided by the manufacturer (Samsung Unified Driver). The printing over the network works fine, I can administer the device using browser. The only problem I have is using scanner over the network. It works fine if I disable firewall, but is blocked with firewall enabled. I can not figure out which ports or port-range I must enable for this scanner. Do you have any information on this one or how can I found out the necessary ports to open?
View 3 Replies View RelatedI just bought 3G modem bandluxe c170. The modem come without driver. I tried to active ppp dialer by "sudo wvdialconf /etc/wvdial.conf" but it failed to detect/scan the modem. install this modem? I am installing on Acer Aspire 4520 (AMD) and ubuntu 9.10.
View 1 Replies View RelatedI bought this wireless card because alot of people said it worked out of the box and it almost worked... Ubuntu recognizes it and the wireless module is activated I just can't seem to scan for networks or connect to them... So I am listing some outputs for you guys and hopefully there is an easy fix.
[Code]....
Machine is an MSI U130 netbook running Ubuntu 10.04.2 LTS 01:00.0 Network controller: RaLink RT3090 Wireless 802.11n 1T/1R PCIe interface
Code:
wlan0 RT2860 Wireless ESSID:"" Nickname:"RT2860STA"
Mode:Auto Frequency=2.412 GHz Access Point: Not-Associated
Bit Rate:1 Mb/s
[code]....
I realize that Ubuntu recognizes the card, but I'm not sure why it's not picking up any networks that are around and says "disconnected", even though I've made sure that the wireless network light is enabled on the netbook.
i have a hp 6500 e709a printer. have configured for network printing and would like to use the scan facility.i have tried to scan from the printer but it does not find the computer. the hp documents mention advanced firewall information on incoming udp ports and tcp ports etci believe it is with my machine as my son has a windows box with the hp software and i have managed to scan from that machine.
View 4 Replies View RelatedMy computer recognizes the printer and has no trouble printing out any documents. The printer can scan papers to a memory card and makes copies just fine too. But when I select "Scan to PC" I get the message "Try scan from computer or see documentation. Press OK." Of course, the printer included next to no documentation, only the basic plug-it-in-and-turn-it-on instructions. Simple Scan said that it did not find a scanner.
View 8 Replies View Related