Scanning my UDP ports
You appear to only have scanned TCP and not UDP. There might also be UDP services you want to worry about :-).
UDP scanning has a number of issues that do not apply to TCP scanning. In either case, I would start by querying the OS instead: How do I list all sockets which are open to remote machines?
Port scanning is still useful as a confirmation though. Port scanning from a different host is a particularly good idea if you have set up a firewall, to confirm that the firewall is doing what you want.
Thanks. (1) Do ss and netstat report sockets, without regard to any local firewall?
Yes.
(2) What is your command for port scanning for TCP and UDP? For example, sudo
nmap -p0-65535 -sU 192.168.1.97have been running for a while. -- Tim
security udp nmap
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
add a comment |
You appear to only have scanned TCP and not UDP. There might also be UDP services you want to worry about :-).
UDP scanning has a number of issues that do not apply to TCP scanning. In either case, I would start by querying the OS instead: How do I list all sockets which are open to remote machines?
Port scanning is still useful as a confirmation though. Port scanning from a different host is a particularly good idea if you have set up a firewall, to confirm that the firewall is doing what you want.
Thanks. (1) Do ss and netstat report sockets, without regard to any local firewall?
Yes.
(2) What is your command for port scanning for TCP and UDP? For example, sudo
nmap -p0-65535 -sU 192.168.1.97have been running for a while. -- Tim
security udp nmap
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
add a comment |
You appear to only have scanned TCP and not UDP. There might also be UDP services you want to worry about :-).
UDP scanning has a number of issues that do not apply to TCP scanning. In either case, I would start by querying the OS instead: How do I list all sockets which are open to remote machines?
Port scanning is still useful as a confirmation though. Port scanning from a different host is a particularly good idea if you have set up a firewall, to confirm that the firewall is doing what you want.
Thanks. (1) Do ss and netstat report sockets, without regard to any local firewall?
Yes.
(2) What is your command for port scanning for TCP and UDP? For example, sudo
nmap -p0-65535 -sU 192.168.1.97have been running for a while. -- Tim
security udp nmap
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
You appear to only have scanned TCP and not UDP. There might also be UDP services you want to worry about :-).
UDP scanning has a number of issues that do not apply to TCP scanning. In either case, I would start by querying the OS instead: How do I list all sockets which are open to remote machines?
Port scanning is still useful as a confirmation though. Port scanning from a different host is a particularly good idea if you have set up a firewall, to confirm that the firewall is doing what you want.
Thanks. (1) Do ss and netstat report sockets, without regard to any local firewall?
Yes.
(2) What is your command for port scanning for TCP and UDP? For example, sudo
nmap -p0-65535 -sU 192.168.1.97have been running for a while. -- Tim
security udp nmap
security udp nmap
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
edited 17 secs ago
sourcejedi
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
asked 6 mins ago
sourcejedisourcejedi
25.3k445110
25.3k445110
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
That is one of the issues that might apply to UDP scanning. To be honest I have not bothered much with it. I think you can bump up the timing when you are on your nice fast local wired network. -T5 seems to work ok on loopback :-), it completed a full UDP scan in less than 3 minutes. Hint: press enter while nmap is running, and it will show a progress indicator.
If you're just testing the firewall, all you need to do is pass the list of ports that were shown by netstat / ss, that you think your firewall was configured to protect :-P. I do not tend to have many weird network services that are listening on physical interfaces but that I need to firewall, so I can just type them in manually :-P. The paranioa value of a real scan though, is it would help people start noticing things like the intel ME stupidity. https://mjg59.dreamwidth.org/49611.html
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f508092%2fscanning-my-udp-ports%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
That is one of the issues that might apply to UDP scanning. To be honest I have not bothered much with it. I think you can bump up the timing when you are on your nice fast local wired network. -T5 seems to work ok on loopback :-), it completed a full UDP scan in less than 3 minutes. Hint: press enter while nmap is running, and it will show a progress indicator.
If you're just testing the firewall, all you need to do is pass the list of ports that were shown by netstat / ss, that you think your firewall was configured to protect :-P. I do not tend to have many weird network services that are listening on physical interfaces but that I need to firewall, so I can just type them in manually :-P. The paranioa value of a real scan though, is it would help people start noticing things like the intel ME stupidity. https://mjg59.dreamwidth.org/49611.html
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
add a comment |
That is one of the issues that might apply to UDP scanning. To be honest I have not bothered much with it. I think you can bump up the timing when you are on your nice fast local wired network. -T5 seems to work ok on loopback :-), it completed a full UDP scan in less than 3 minutes. Hint: press enter while nmap is running, and it will show a progress indicator.
If you're just testing the firewall, all you need to do is pass the list of ports that were shown by netstat / ss, that you think your firewall was configured to protect :-P. I do not tend to have many weird network services that are listening on physical interfaces but that I need to firewall, so I can just type them in manually :-P. The paranioa value of a real scan though, is it would help people start noticing things like the intel ME stupidity. https://mjg59.dreamwidth.org/49611.html
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
add a comment |
That is one of the issues that might apply to UDP scanning. To be honest I have not bothered much with it. I think you can bump up the timing when you are on your nice fast local wired network. -T5 seems to work ok on loopback :-), it completed a full UDP scan in less than 3 minutes. Hint: press enter while nmap is running, and it will show a progress indicator.
If you're just testing the firewall, all you need to do is pass the list of ports that were shown by netstat / ss, that you think your firewall was configured to protect :-P. I do not tend to have many weird network services that are listening on physical interfaces but that I need to firewall, so I can just type them in manually :-P. The paranioa value of a real scan though, is it would help people start noticing things like the intel ME stupidity. https://mjg59.dreamwidth.org/49611.html
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
That is one of the issues that might apply to UDP scanning. To be honest I have not bothered much with it. I think you can bump up the timing when you are on your nice fast local wired network. -T5 seems to work ok on loopback :-), it completed a full UDP scan in less than 3 minutes. Hint: press enter while nmap is running, and it will show a progress indicator.
If you're just testing the firewall, all you need to do is pass the list of ports that were shown by netstat / ss, that you think your firewall was configured to protect :-P. I do not tend to have many weird network services that are listening on physical interfaces but that I need to firewall, so I can just type them in manually :-P. The paranioa value of a real scan though, is it would help people start noticing things like the intel ME stupidity. https://mjg59.dreamwidth.org/49611.html
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
edited 1 min ago
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
answered 6 mins ago
sourcejedisourcejedi
25.3k445110
25.3k445110
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f508092%2fscanning-my-udp-ports%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
