Scan who using wat port? (especially for P2P program)

[oyao]

Hi, there. How can i know other PC on a LAN is using what ports, especially for those P2P program. For example likes Bit Torrent.


I am using a router modem and a switch to connect 4 pc in the LAN. The router modem has only limited functions such as port forwarding but without function such as port monitoring.

[SirDice]

A little bit of info on your network setup would help us help you.

[kr5kernel]

check out nmap
http://www.insecure.org/

its a port scanner that will show you if other pc's on your lan are running services or servers. You could see if said p2p application has a static server port, and then nmap the lan to see which pc's are running them.

but yes, a little more description would be nice.

[oyao]

I have already use nmap to scan their PC but it failed to detect them. For example, let said they using E-Mule (another p2p program) , the port range should at least have some 4 thousand something. But i sitl i cannot detect them.

[SirDice]

Did nmap detect any open port? If not, the user might be running a firewall (which will result in a high ID on the Donkey network, thus slow downloads but that's an entirely different issue). Run a sniffer to see if you can detect any of the P2P traffic.

[oyao]

nmap has detected some open ports but the port is coming from some other applications such as yahoo messenger and IIS server.


Any recommendation for the packet sniffer progarm? Thanks.

[SirDice]

Ethereal is nice

[soniw23]

where can you get nmap can you go to insecure's website

[TheSpecialist]

Originally posted here by soniw23
where can you get nmap can you go to insecure's website

Thanks, you've really had alot of good things to add to this very old thread. http://www.insecure.org/nmap/nmap_download.html
Now **** off...