Re: what could explain seen ports one day, not seen the next, never seen then all the sudden seen?

transient services on high ports could do this. firewall manipulation could
as well.

On Thu, Aug 28, 2008 at 9:35 AM, [SiN] <[email protected]> wrote:

> ive been trying to use nesses to keep a ports list of open ports and
> systems on my public network.  When I go talk to an owner of a system I am
> told those ports have been open for years and they actually connect to them
> on a daily basis during their daily work.  I could see an instance where a
> port was seen one day and not the next then back again.  But ive been seeing
> more and more ports open up as new ports but in fact have been there for a
> long time.  Im also seeing instances where ports are seen during the scan, I
> check later with nmap or try and connect through telnet (to tcp ports) and
> its closed (most cases the ports are listed as UNKNOWN).
>
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
>



-- 
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus