[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sidewinder
Subject:    Re: [Sidewinder] Server port mapping
From:       sidewinder () adeptech ! com
Date:       2004-09-22 2:58:26
Message-ID: 6ec88adc04092119584ca5e48a () mail ! gmail ! com
[Download RAW message or body]

On Mon, 20 Sep 2004 16:26:12 -0400, Bryan Swann wrote:
> I am writing a script to perform an audit on the Sidewinder G2 ruleset.
> It is fairly simple to track down the port numbers that proxies are
> running.  However, the servers are more difficult.  A few servers even
> allow you to specify the port they operate.
> 
> Does anyone have an effective way to map servers running on the
> Sidewinder to the port thay use?  Most seem to have a default port, a
> few can be dynamically set, some have a specific configuration file,
> others may be mapped correctly in the /etc/services file.

When logged in on the firewall itself, you can use 'lsof' to show
which process is behind any listening TCP/UDP port:

foo:Use r(5) % srole
foo:Admn {1} % lsof -i:3128
lsof: WARNING: compiled for BSDI release 6.1.0.00; this is 6.1.0.02.
COMMAND   PID USER   FD   TYPE     DEVICE SIZE/OFF NODE NAME
nss     15126 root    6u  IPv4 0xe5f0b100      0t0  TCP *:WebProxy (LISTEN)
nss     15127 root    9u  IPv4 0xe53cb100      0t0  TCP *:WebProxy (LISTEN)
foo:Admn {2} % lsof -i:22
lsof: WARNING: compiled for BSDI release 6.1.0.00; this is 6.1.0.02.
COMMAND   PID USER   FD   TYPE     DEVICE SIZE/OFF NODE NAME
nss     15117 root    7u  IPv4 0xe1544100      0t0  TCP *:ssh (LISTEN)
nss     15119 root    7u  IPv4 0xe16b3000      0t0  TCP *:ssh (LISTEN)
. . .


Kevin Kadow
_______________________________________________
Sidewinder mailing list
Sidewinder@adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder
[prev in list] [next in list] [prev in thread] [next in thread]