Re: [SLUG] Probing of a network port.

From: Derek Glidden (dglidden@illusionary.com)
Date: Thu Jan 10 2002 - 18:06:34 EST


On Thu, 2002-01-10 at 14:04, Brett Simpson wrote:
> Hi,
>
> I currently have a Novell server running Groupwise that very frequently crashs. When it happens just the Groupwise portion goes down but the rest of the server is ok. I'm using some software called NetSaint on Linux to check this servers network ports by doing a TCP scan. The only problem is when Groupwise goes down the port is still registered as being open. Is there a way using either nmap or another program to do a more detailed scan or probe of the port? Thanks.

If you know any "handshake" information about how Groupwise should
respond to a connection to that port, you can use the tcp-port monitor
from Netsaint with the "send/expect" flags to send it data to which you
expect a certain reply. If the plugin doesn't get that reply, you know
your Groupwise is dead even if the port is still accepting connections.

Unfortunately, I'm going to bet there is little to no documentation
about what's required for connection handshaking with a Groupwise
server.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
#!/usr/bin/perl -w
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map
{$_%16or$t^=$c^=($m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;
$t^=(72,@z=(64,72,$a^=12*($_%16-2?0:$m&17)),$b^=$_%64?12:0,@z)
[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$h=5;$_=unxb24,join
"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$d=
unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d
>>12^$d>>4^$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*
8^$q<<6))<<9,$_=$t[$_]^(($h>>=8)+=$f+(~$g&$t))for@a[128..$#a]}
print+x"C*",@a}';s/x/pack+/g;eval 

usage: qrpff 153 2 8 105 225 < /mnt/dvd/VOB_FILENAME \ | extract_mpeg2 | mpeg2dec -

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/ http://www.eff.org/ http://www.anti-dmca.org/



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:39:14 EDT