[47956] in North American Network Operators' Group
Re: "portscans" (was Re: Arbor Networks DoS defense product)
daemon@ATHENA.MIT.EDU (Ralph Doncaster)
Sun May 19 09:58:29 2002
Date: Sun, 19 May 2002 09:59:09 -0400 (EDT)
From: Ralph Doncaster <ralph@istop.com>
To: Scott Francis <darkuncle@darkuncle.net>
Cc: "nanog@merit.edu" <nanog@merit.edu>
In-Reply-To: <20020519030722.GB69382@darkuncle.net>
Message-ID: <Pine.LNX.4.21.0205190956350.16913-100000@cpu1693.adsl.bellglobal.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
> > I often like to know if a particular web server is running Unix or
> > Winblows. A port scanner is a useful tool in making that determination.
>
> a full-blown portscan is not required here. A simple telnet to port 80 will
> do the job.
A simple telnet to port 80 will sometimes do the job, but often not.
And even your statement "a full-blown portscan is not required" concedes
that a portscan will work in making this determination.