hi Folks!!!!!

i hv made an attempt to make a portscanner using C by making use of socket programming.. everything is fine... the programs works well but when i compare the result with that of nmap... there are three changes...it shows 3 extra open ports than nmap... two of them are 2207 nd 2208 nd the other is a high order port which changes each time i run my program nd has been always above 50000 so far which i guess to be the port to which my portscanner binds itself.... Now the question is which services r binding themselves to ports 2208 nd 2207.... there is no entry in /etc/services regarding these two ports... however... they do appear to be listening when i execute netstat -ntlp frm the shell....... another question is to kick out the port frm the output to which my portscannner binds itself......nd the third question is that how can i make my portscanner match the list of open ports it finds to the entries in /etc/services... so dat it can pick up the name of that service nd print the name of the service in the output on the shell.



Waiting 4 ur responses....

author_unknown

2208 & 2207: I found them to be related to certain HP printers. They may be also used by troyans etc.

What method of portscanning do you use? The results will depend on that. So will do the way you open your portscanner port: is it raw, tcp, udp?

When it comes to service names, check getservent() function and the related ones (from man servent). getservbyport() seems to be the right one for you.