Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Raw Socket-based port detection method and device

A detection method and detection device technology, applied in the direction of digital transmission systems, electrical components, transmission systems, etc., can solve problems such as inability to perform port detection normally

Pending Publication Date: 2022-04-12
北京华云安信息技术有限公司
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0002] At present, during port detection, the port scanning methods are generally TCP (Transmission Control Protocol, Transmission Control Protocol) full connection scanning and SYN (Synchronize Sequence Numbers, synchronization sequence number) semi-connection scanning such as figure 1 and figure 2 As shown, but the defect is that both TCP and SYN have handshake responses. When a user initiates a large number of TCP full connection or SYN half connection requests, the detected target machine is likely to record these connections. The firewall or IDS (intrusion detection system, intrusion detection system) will also capture two scanning methods; in this way, scanning the same machine or a large number of adjacent IP machines at the same time is easy to be filtered by the firewall on the target machine or block the IP, making it impossible to carry out the port normally. detection

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Raw Socket-based port detection method and device
  • Raw Socket-based port detection method and device
  • Raw Socket-based port detection method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0037] In order to make the purpose, technical solutions and advantages of the embodiments of the present disclosure clearer, the technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments It is a part of the embodiments of the present disclosure, but not all of them. Based on the embodiments in the present disclosure, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present disclosure.

[0038] In addition, the term "and / or" in this article is only an association relationship describing associated objects, which means that there may be three relationships, for example, A and / or B, which may mean: A exists alone, A and B exist at the same time, There are three cases of B alone. In addition, the character " / " in this article ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention provides a port detection method and device based on Raw Socket. The method comprises the following steps: constructing a port detection packet through Raw Socket; sending the port detection packet to a test target machine; if the RST message returned by the test target machine is received, confirming that the port of the test target machine is closed; and otherwise, confirming that the port of the test target machine is opened. In this way, the Raw Socket message can be utilized to bypass port detection of the stateless firewall / IDS system so as to prevent the scanning machine from being blocked as much as possible.

Description

technical field [0001] The present disclosure relates to the field of testing, in particular to the technical field of port detection. Background technique [0002] At present, during port detection, the port scanning methods are generally TCP (Transmission Control Protocol, Transmission Control Protocol) full connection scanning and SYN (Synchronize Sequence Numbers, synchronization sequence number) semi-connection scanning such as figure 1 and figure 2 As shown, but the defect is that both TCP and SYN have handshake responses. When a user initiates a large number of TCP full connection or SYN half connection requests, the detected target machine is likely to record these connections. The firewall or IDS (intrusion detection system, intrusion detection system) will also capture two scanning methods; in this way, scanning the same machine or a large number of adjacent IP machines at the same time is easy to be filtered by the firewall on the target machine or block the IP,...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L43/50H04L43/08H04L5/00
Inventor 刘加勇白兴伟吴璇
Owner 北京华云安信息技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products