[47964] in North American Network Operators' Group
Re: Re[2]: "portscans" (was Re: Arbor Networks DoS defense
daemon@ATHENA.MIT.EDU (JC Dill)
Sun May 19 11:26:41 2002
Message-Id: <5.0.0.25.2.20020519081656.0392d250@pop3.vo.cnchost.com>
Date: Sun, 19 May 2002 08:21:23 -0700
To: "nanog@merit.edu" <nanog@merit.edu>
From: JC Dill <nanog@vo.cnchost.com>
In-Reply-To: <Pine.LNX.4.21.0205191048060.23671-100000@cpu1693.adsl.bell
global.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Errors-To: owner-nanog-outgoing@merit.edu
On 07:50 AM 5/19/02, Ralph Doncaster wrote:
>
>> RD> I often like to know if a particular web server is running Unix or
>> RD> Winblows. A port scanner is a useful tool in making that
determination.
>>
>> [allan@ns1 phpdig]$ telnet www.istop.com 80
>> Trying 216.187.106.194...
>> Connected to dci.doncaster.on.ca (216.187.106.194).
>> Escape character is '^]'.
>> HEAD / HTTP/1.0
>>
>> HTTP/1.1 200 OK
>> Date: Sun, 19 May 2002 01:47:57 GMT
>> Server: Apache/1.3.22 (Unix) FrontPage/4.0.4.3 PHP/4.1.2 mod_fastcgi/2.2.8
>
>Sure, it works on some servers, but try it on yahoo.com, cnn.com, ...
<http://uptime.netcraft.com/up/graph/?mode_u=off&mode_w=on&site=www.cnn.com>
Works for me, works from any system that has a browser. At any given time
I'm *far* more likely to have a browser running than port scanning
software, so this solution is also IMHO faster.
jc
