CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 937
Comments: 25
block bottom
spacer spacer

udp port scanner
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> General Site [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
!claire

General
General
Premium Member

Joined: Apr 21, 2002
Posts: 8380

Premium

PostPosted: Thu May 30, 2002 7:35 pm    Post subject: udp port scanner
Reply with quote

Hi,
I have been trying the udp port scanner but I'm always disconnected
even if Iask the 30ports scan only Confused

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu May 30, 2002 7:49 pm    Post subject:
Reply with quote

Are you getting any alerts that you are being scanned?


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
!claire

General
General
Premium Member

Joined: Apr 21, 2002
Posts: 8380

Premium

PostPosted: Thu May 30, 2002 8:08 pm    Post subject: udp port scanner
Reply with quote

Yes,
I have alerts on ZA but the test never ends.I always get the message
congestion on the system or something like that and i am disconnected Confused

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu May 30, 2002 8:14 pm    Post subject:
Reply with quote

Yes... running a UDP scanner that far away can cause some problems. You may want to check back at a time when the network between you and the server is less congested.

In the meantime, let me setup a 10 port scan, which should run fine for anyone who is located anywhere during heavy congestion.

Let me know how the 10 port scan goes.. It'll be up in 5-10 mns.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
!claire

General
General
Premium Member

Joined: Apr 21, 2002
Posts: 8380

Premium

PostPosted: Thu May 30, 2002 8:19 pm    Post subject: udpportscanner
Reply with quote

I see that it's 6 in the morning by ccsp.I suppose the traffic is not that important so early in the morning(for you). Anyway,I'll try your 10 port
scan and let you know.But a ten port scan does not seems relevant to me(but I'm a newbie as you already know) Smile

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu May 30, 2002 8:23 pm    Post subject:
Reply with quote

Ahh.. check your profile:

CastleCops Link/modules.php?name=Forums&file=profile&mode=editprofile

Make sure you have your timezone configured properly. Its 4:20 PM my time.

The UDP scanner is not meant to really probe 1000 ports. The ideal UDP scanner scans for certain ports, like the ones the 10 port option scans: ports 130-140 (netbios is one of those ports).

Apparently some users are able to use the 1000+ option with no problem... I for one have not been able to run it successfully. not even the 100 port. Network is too congested between the server and me.

Once I get the TCP port scanner online, the 1000+ port scan option is more feasible since TCP is a realible protocol, unlike UDP.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
!claire

General
General
Premium Member

Joined: Apr 21, 2002
Posts: 8380

Premium

PostPosted: Thu May 30, 2002 8:38 pm    Post subject: udpportscanner
Reply with quote

I updated my profile but the 10 ports scan failed also(same reason)
I'll try when it will be night time for you.Probably very early for me(sight)
on Saturday or Sunday
I'll tell you if it works then
Thanks anyway for your help Smile

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu May 30, 2002 9:09 pm    Post subject:
Reply with quote

Thanks Claire... When I release the TCP Scanner, let me know how you make out.. you shouldn't have problems with that. Trans-oceanic UDP scans can be somewhat taxing. Trans-oceanic TCP scans are more manageable.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Johnny-B-Goode

Captain
Captain
Premium Member

Joined: Mar 30, 2002
Posts: 659
Location: Ethiopia
Premium

PostPosted: Thu May 30, 2002 9:59 pm    Post subject:
Reply with quote

Hi Paul!

Same thing here (UK) as with Claire in Belgium. So it's really a logistics issue due to the type of scan and the distances and likely congestion between NY and the UK and the rest of Europe?

Gordon

Back to top
View users profile Send private message Visit posters website
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu May 30, 2002 10:48 pm    Post subject:
Reply with quote

That, and perhaps the initial network scan. The initial network scan conducts a probe of 100 or so ports in the range: 55555-55655. What I may be able to do is cut down that 100 or so in half... it may make the timeout for the real scan less accurate, but it may give you guys the chance to use it.

First if you two can, run the scan when you wake up so we're asleep over here in the states. Please post back with your findings. Work your tests up from the 10 port scan, and so on.

If it still doesn't work, I'll write up a special scan for trans-oceanic probes.. which may be slightly less accurate.

I hope however to get the TCP scanner online tonight or tomorrow.. which is far more reliable than the UDP.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
Johnny-B-Goode

Captain
Captain
Premium Member

Joined: Mar 30, 2002
Posts: 659
Location: Ethiopia
Premium

PostPosted: Thu May 30, 2002 11:14 pm    Post subject:
Reply with quote

Thanks! I wish I had just half of your energy and dedication! Smile

Back to top
View users profile Send private message Visit posters website
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Thu May 30, 2002 11:44 pm    Post subject:
Reply with quote

Ok, I have a new scan for trans-oceanic probes. Its just a 10 port scanner so we can set up a baseline for you folks. Instead of checking against 100 ports in the 55555 range, it checks 40.

With our help, we'll be able to tweak it so that it is accurate to a certain degree for trans-oceanic probes.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
!TEggHead

Sergeant
Sergeant


Joined: May 10, 2002
Posts: 134
Location: Netherlands

PostPosted: Fri May 31, 2002 12:10 am    Post subject:
Reply with quote

Question I dunno, maybe I missed and clicked another, but I thought I clicked the top one on the first list...anyways, it's been running for 10 minutes now, and while looking at the portnumbers getting probed I suddenly got an idea Smile

Ok, the UniCode table contains an odd 65000 characters right...?

and we got about 65000 ports available right?

soooo....communicating a message without making actual contact and still getting accross what you want to say...

Laughing erm... Cool <yells downstairs> what was that for cake !?

Back to top
View users profile Send private message Yahoo Messenger MSN Messenger
!claire

General
General
Premium Member

Joined: Apr 21, 2002
Posts: 8380

Premium

PostPosted: Sat Jun 01, 2002 5:11 am    Post subject: udp port scanner
Reply with quote

Hi,
I tried again this morning(06am for me should be around midnight for you)Same result for the 10 ports scan.Failed Crying or Very sad

Back to top
View users profile Send private message
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Sat Jun 01, 2002 6:28 am    Post subject:
Reply with quote

Claire.. I think I know why.. because the problem is readily apparent in the beta Trojan TCP Scan. It doesn't want to integrate with PHPNuke .. it doesn't like to play nice.

I believe the same is true for the UDP scanner. I haven't been able to work on it since Thursday, so we'll see what the next couple days bring if I can find the time.. otherwise its back to the coding on Monday.

Thanks for trying again. If it so happens that I can't integrate it into the portal, that'll be fine.. I'll offer it up standalone. What that means is, it will be available on the site, just not part of the portal package (infrastructure this is readily apparenty, but face value, no one may even notice).


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website