I use port scanning across my internal workstations to identify unknown services or machines that match a specific profile, such as those that run IIS. You’ll find the scanner output cryptic at times. A recently deployed application might use a port that you haven’t seen before. However, you can likely find references on the Internet that list which application or service corresponds to that particular port. The basic sample that Figure A shows indicates one way to correlate Nmap output to a specific service. First, the output shows a scan of a server named Sunriver running a new installation of XP, with Nmap configured for a TCP SYN scan.
In this output, you might not recognize TCP port 5000 or the name fics. Nmap uses the nmap-services file to match port numbers to names. For some ports, the file includes a short description of the port. In this case, fics is an acronym that stands for "Free Internet Chess Server," as Figure B shows. . . .
Register
