Re: oka...let's try something else ...

[Nicolas Gregoire <ngregoire () exaprobe com>]

> but one of those 5 open ports they don't mentioned
> about open ssh port..all that nmap said to me is one
> port 6666 is used by ircserv
> and when i tried : telnet ip 6666...
> it told me that it is his rootkit ssh port !!!!
> that maked me very confuse...

Nmap use a file called nmap-services to map a port number to a service.
On my box :

grep 6666 /usr/share/nmap/nmap-services
irc-serv                6666/tcp                # internet relay chat server

But Nmap doesn't try to check if the service listenning on TCP/6666 is ssh ou ircd.

BTW, there's a patch available at ftp://ftp.saurik.com/pub/nmap/ which adds an option to
Nmap and allows service guessing.

Nicob




---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).