Hi, On Thu, Sep 10, 2009 at 09:50:23AM -0400, Randy McAnally wrote: > > So - to summarize this: "the only way to reliably detect what sockets > > the box is listening on is to run nmap against it", right? > > Regardless, run NMAP anyways. Never trust what the box tells you even if it > did list your listening ports 'properly'.
We do, but this is surprisingly difficult.
Some of the ports are really only open from certain source IPs (like
telnet/ssh if a vty ACL is used), so when nmap doesn't list anything,
you never know "is *this* address not permitted to see the telnet port?"
or "is the telnet service really not listening at all?"
For the things that I know about (telnet, ssh, http/s, ldp, bgp) I know
how to verify, but I was hoping for an easy way to see what else might
be lurking...
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpZe2ZIeSn5t.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
