[SLUG] Fw: Service Identification

From: Robert Foxworth (rfoxwor1@tampabay.rr.com)
Date: Tue Dec 09 2003 - 07:30:40 EST


 Sluggers,

This was on the pen-test list. Anyone here ever see this effect or have an
idea what is involved with this effect? (it's on linux) Tnx, Bob

> -----Original Message-----
> From: Beaty, Bryan [mailto:Bryan.Beaty@vector.com]
> Sent: Sunday, December 07, 2003 6:21 PM
> To: pen-test@securityfocus.com
> Subject: Service Identification
>
>
> I port scanned a box I am working on. I know the box is some form of
Linux.
> I see that port 23,25 and 53 are open. I can identify 53 as DNS. Both NMAP
> and AMAP identify it as DNS.
>
> Port 23 and 25 are open but cannot be identified by AMAP or NMAP. When I
> telnet <ip> 23 or 25 I get a blank screen. If I type I just get blank
spaces
> or underscore symbols on the screen.
>
> Does this mean the telnet and SMTP server have crashed?
> Could it be that someone has installed some other service on these ports?
> How do you identify services that respond like this? Seems like I run into
> this from time to time but I never have learned how to deal with it.
>
> Any ideas what to do at this point? I do not have physical access to the
> box.
>
> Thanks,
> Bryan Beaty

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:29:16 EDT