Listing Communication Ports...

[B14speedfreak]

Hi all,

My thanks in advance for any posts and (more importantly) for reading?!

Anyhow I have been set the task of working out which communication ports we have in use on our Oracle Boxes (its an audit thing), I can work out the Oracle ones, but I have no idea how to work out which other ports (eg ftp) are or are not in use. Anyhow has anyone got any ideas for a quick script that I could that would show this? I looking to do it on Unix Solaris 8.

Any ideas are most welcomed,

B14.. aka... marky Mark...


B14... aka... Marky Mark... the frozen monkey in the server room...

 

[B14speedfreak]

Has anyone used this tool at all?

http://insecure.org/nmap/index.html

B14... aka... Marky Mark... the frozen monkey in the server room...

 

[coffeysm]

Yes, I have used nmap before (been awhile) it is a great port scanner. The following should give a start to where to look. A lot of stuff gets started up in rc2.d and rc3.d directories (sendmail, nfs, autofs, nis, etc...) look for scripts running there.

grep -v "^#" /etc/inet/inetd.conf
rpcinfo
netstat -na

if you have lsof
lsof | grep -i listen | sort

 

[B14speedfreak]

Hi Thanks for the reply,

I think that they will be satisfied with the nmap results.

But I will have a look at the other things, could be useful.

Thanks,

B14... aka... Marky Mark... the frozen monkey in the server room...

 

[coffeysm]

I would use nmap as well...I was just giving you that in cas e you run into problems installing it. You could also look into getting Nessus which is a vulnerability scanner that can run along with nmap.

 

[B14speedfreak]

I was looking at security stuff a while back and came across the CIS benchmarking site. Not sure if they are any good really. I think we are still looking at reviewing how we harden our servers (hence the audit I prosume).

I also have had a look at the CIA site, they have guide on their recomendations of hardening most servers/os's.

Thanks again,

Mark.

B14... aka... Marky Mark... the frozen monkey in the server room...

 

[coffeysm]

I have used the CIS benchmarking tool as well (I work for the DoD). It is a really good tool and I would recommend checking it out. You should also check out the NSA website they have a 60 page PDF dedicated to Solaris.

 

[B14speedfreak]

Thats really useful. I will have a read at some point - keep getting given things to do... I swear I have a reading list about the same hight as me!

Thanks again,



B14... aka... Marky Mark... the frozen monkey in the server room...

 

[max1x]

Have a look at /etc/services