OK, I'm lame.
I was connecting to the wrong port. I'm supposed to be connecting to 5901/tcp I believe what was confusing me was that nmap shows this on a machine running VNCserver.. Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ ) Warning: You are not root -- using TCP pingscan rather than ICMP Interesting ports on localhost.localdomain (127.0.0.1): (The 1541 ports scanned but not shown below are in state: closed) Port State Service 22/tcp open ssh 110/tcp open pop-3 111/tcp open sunrpc 143/tcp open imap2 497/tcp open dantz 693/tcp open unknown 993/tcp open imaps 995/tcp open pop3s 5801/tcp open vnc-1 5901/tcp open vnc-http-1 6001/tcp open X11:1 10000/tcp open snet-sensor-mgmt 32770/tcp open sometimes-rpc3 Notice how 5801/tcp is vnc-1 and 5901/tcp is vnc-http-1 I thought 5801 was the port for vncviewer apps and 5901 was the http interface. It is the other way around. Hmmm. Should I contact NMAP dev.? thanx for the help. On Mon, 2003-07-14 at 21:09, Jose Guevarra wrote: > Hi, > > I was using SSH to encrypt a VNC session. For some reason, even though > I seem to encrypt the session it doesn't work. > > I do > > $> ssh -2C -L 5801:vncserver:5801 localhost > > this opens a port on my machine ( port 5801) to the vnc port on the > vncserver. I try to connect to it via vncviewer > > $> vncviewer localhost:1 > > That doesn't work. > > Decided to do the same thing with the SMTP port on the same machine just > to test if it worked and it was encrypted. I loaded up Ethereal, > started a capture, then sent an email via commandline SMTP commands. > > when I looked at the session packets, they were all in plain-text? > > So is this working or not? > > I also noticed that connecting to the SMTP port sort of took a while to > initiate. Could VNCviewer be timing out before the session could be > made. > > thanx, > > > > --------------------------------------------------------------------------- > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! > The Gartner Group just put Neoteris in the top of its Magic Quadrant, > while InStat has confirmed Neoteris as the leader in marketshare. > > Find out why, and see how you can get plug-n-play secure remote access in > about an hour, with no client, server changes, or ongoing maintenance. > > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm > ---------------------------------------------------------------------------- -- ======================================== Jose Guevarra Systems Administrator iQUEST Rm 5215 Broida Hall University of California, Santa Barbara Santa Barbara, CA 93106 Phone: 805.893.8108 Fax: 805.893.8170 Email: [EMAIL PROTECTED] Web: www.iquest.ucsb.edu ======================================== --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ----------------------------------------------------------------------------
