DISATelecomTech
IS-IT--Management
I was asked to find all enabled TCP/UDP ports on our network, is there an easy way to find this info without making a maunal list of source/destination ports using our sniffer or network advisor.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
How do I find all active TCP/UDP ports on our network with Sniffer?
- Thread starter DISATelecomTech
- Start date
- Status
Sniffer will only see what it captures. So if a port is not in use when you perform a capture. Sniffer won't see it.
Use Monitor > protocol distribution and Tools > Reporter. Do some ports scans while sniffer is running (see network view below).
You really only care about ports on servers. Clients use random port for each transaction. Ex client 3542 > server 25 is SMTP.
First you want to define the scope of work.
Make a map of your network.
What servers, routers, firewalls, workstations, printers, etc are out there?
Where is your sniffer placed? What will it see? Network view is a nice inexpensive tool to map your network and find open ports.
Use Monitor > protocol distribution and Tools > Reporter. Do some ports scans while sniffer is running (see network view below).
You really only care about ports on servers. Clients use random port for each transaction. Ex client 3542 > server 25 is SMTP.
First you want to define the scope of work.
Make a map of your network.
What servers, routers, firewalls, workstations, printers, etc are out there?
Where is your sniffer placed? What will it see? Network view is a nice inexpensive tool to map your network and find open ports.
- Status
Similar threads
- Locked
- Question