Is it possible to detect a portscan with nc or a socket listener?

		LinuxQuestions.org > Forums > Linux Forums > Linux - Security
Is it possible to detect a portscan with nc or a socket listener?

Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Welcome to LinuxQuestions.org, a friendly and active Linux Community.

You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!

Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.

Are you new to LinuxQuestions.org? Visit the following links:
Site Howto | Site FAQ | Sitemap | Register Now

If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.

Having a problem logging in? Please visit this page to clear all LQ-related cookies.

Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.

Exclusive for LQ members, get up to 45% off per month. Click here for more info.

Page 2 of 2

Search this Thread

02-20-2017, 07:45 PM

#16

abefroman

Senior Member

Registered: Feb 2004

Location: lost+found

Distribution: CentOS

Posts: 1,430

Original Poster

Rep:

Quote:

Originally Posted by ntubski

You're referring to http://www.secdev.org/projects/scapy....html#sniffing? I guess it's a nicer interface to the kernel filter I linked to before. That method would probably be better in terms of efficiency.

Thanks! I'm going with that option.

Code:

scapy.all.sniff(prn=mon_callback, filter="port %s"%sys.argv[1], store=0)

Page 2 of 2

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[SOLVED] How could server detect closed client socket using TCP and c++?	Lobinho	Programming	6	08-10-2010 02:28 PM
IPTables portscan detection	introuble	Linux - Security	3	04-30-2008 04:01 AM
Snort/base and portscan	El Fluffo	Linux - Security	0	11-03-2007 03:20 PM
How to detect lost socket connection	sasha_baranov	Programming	4	02-16-2005 11:46 PM
portscan from my own machine	groegert	Linux - Security	1	07-12-2001 09:29 AM

All times are GMT -5. The time now is 08:24 PM.

Main Menu

(Con't)

My LQ

Write for LQ

LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.

Main Menu

Syndicate

Latest Threads

LQ News

Twitter: @linuxquestions