Free network port scanner software for linux

Port Scanner provides a tool to check for open ports.

Port Scanner will try to connect on every port you define for a particular host. If a connection is made, it will try to read any data returned.

This product is intended for individuals to test their own equipment for weak security, and the author will take no responsibility if it is put to any other use.

Amazon sell many books on Security that will enhance your ability to keep your computer secure.

The Windows version has been withdrawn. Apologies for this, but it is too popular and uses my bandwidth up too quickly. If anyone want to host the binary for me, I will happily post a link here. It should also be possible to compile Version 2.1 for Windows.

Whats New in this release:

.(QT) Takes multiple port ranges.
.Minor bugfixes.

Parallel Network Scanner provides a fast network services scanner.
pnscan is a scanner for TCP network services. It uses multithreading to increase its speed.
pnscan tries to be smart as to how many threads to start - it will dynamically start only as many as is needed to make progress in the scan - up to a maximum either as specified with the "-n" command line option, or 8 minus the maximum number of available file descriptors (pnscan tries to increase
it to the max limit automatically) - or any internal limit on the system (Linux normally only allows 256 threads).
Host ranges can be specified both as a CIDR - network name or IP address / mask bit length and as a range. When using CIDR notation - the first and last address is ignored (normally used for broadcasts)
Some examples:
192.168.0.0/24
192.160.0.1:192.160.0.254
arpanet/8
USAGE - EXAMPLES
# Scan network 192.168.0.0/24 for SSH daemons on port 22
pnscan 192.168.0.0/24 22
pnscan 192.168.0.1:192.168.0.254 ssh
# Scan hosts 192.168.10.34 ... 98 for IDENT servers, max 8 threads
pnscan -n8 -w"VERSION" 192.168.10.34:192.168.10.98 113
# Scan host 127.0.0.1 for WWW servers on all ports
pnscan -w"HEAD / HTTP/1.0rnrn" -r"Server:" 192.168.0.32 1:65525
pnscan -w"HEAD / HTTP/1.0rnrn" -r"Server:" localhost 1:65525
# Send binary data and expect the binary sequence FF 00 FF on port 145.
pnscan -W"05 5A 37" -R"FF 00 FF" 192.168.0.32 145
# Scan for Roxen servers and print the whole Server-line
pnscan -l -w"HEAD / HTTP/1.0rnrn" -r"Roxen" localhost 1:65525
# Scan for pidentd servers and try to locate the version
pnscan -w"VERSION" 192.160.0.0/24 113
# Scan network arpanet/24 for daytime servers and sort them IP-numerically
pnscan arpanet/10 daytime | ipsort
# Read host (&port) lines from stdin and scan the selected hosts for SSH
echo 192.160.10.11 ssh | pnscan -v
echo 192.160.10.12 | pnscan 22
Enhancements:
- pnscan.sgml Added the other options implemented in pnscan.c.
- pnscan.c: Modified the threads startup code to dynamically only start as many threads as is needed.

onesixtyone is an efficient SNMP scanner which utilizes a sweep technique to achieve extreme performance. The SNMP protocol is a stateless, datagram oriented protocol. An SNMP scanner is a program that sends SNMP requests to multiple IP addresses, trying different community strings and waiting for a reply. Unfortunately SNMP servers dont respond to requests with invalid community strings and the underlying UDP protocol does not reliably report closed UDP ports. This means that no response from the probed IP address can mean either of the following:
machine unreachable
SNMP server not running
invalid community string
the response datagram has not yet arrived
The approach taken by most SNMP scanners is to send the request, wait for n seconds and assume that the community string is invalid. If only 1 of every hundred scanned IP addresses responds to the SNMP request, the scanner will spend 99*n seconds waiting for replies that will never come.
Thats why traditional SNMP scanners are very inefficient.
onesixtyone takes a different approach to SNMP scanning. It takes advantage of the fact that SNMP is a connectionless protocol and sends all SNMP requests as fast as it can. Then the scanner waits for responses to come back and logs them, in a fashion similar to Nmap ping sweeps. By default onesixtyone waits for 10 milliseconds between sending packets, which is adequate for 100Mbs switched networks. The user can adjust this value via the -w command line option. If set to 0, the scanner will send packets as fast as the kernel would accept them, which may lead to packet drop.
Running onesixtyone on a class B network (switched 100Mbs with 1Gbs backbone) with -w 10 gives us a performance of 3 seconds per class C, with no dropped packets. All 65536 IP addresses were scanned in less than 13 minutes.
onesixtyone sends a request for the system.sysDescr.0 value, which is present on almost all SNMP enabled devices. This returned value gives us a description of the system software running on the device. Here is an excert of a log file:
192.168.120.92 [1234] HP ETHERNET MULTI-ENVIRONMENT,ROM A.05.03,JETDIRECT,JD24,EEPROM A.05.05
130.160.108.146 [public] Hardware: x86 Family 15 Model 0 Stepping 10 AT/AT
COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free)
192.168.112.64 [public] Power Macintosh, hardware type 406; MacOS 9.0; OpenTransport 2.5.2
192.168.104.254 [public] Novell NetWare 4.11 August 22, 1996
192.168.112.83 [public] Macintosh Quadra 650, System Software 7.1
192.168.244.210 [public] RICOH Aficio 850 / RICOH Network Printer D model
192.168.240.39 [public] Cisco Systems WS-C5000
192.168.244.103 [public] HPJ3210A AdvanceStack 10BT Switching Hub Management Module, ROM A.01.02, EEPROM A.01.01, HW A.01.00
Enhancements:
- fixed version number and added a Makefile

My Network Catalog is an indexing engine that allows Windows shares (or Samba shares) to be bound together over a local network.

My Network Catalog allows an easy centralized search of all the files available over the network.

Multi Purpose Scanner is a simple scanner written in C that starts a number of child processes, connects to a list of IP addresses, and logs a certain number of characters to standard out or a file.
Low band use is one consecuence of a single connection per child that recieve an only defined num of characters.
Main features:
- $ mpscan -e -p 25 -t 15 -r 100 -T 20 -R 192.168.1.0-10
- Fast mp-scan 0.04-testing ...
- Total ip: 11
- 11/11 91% 192.168.1.10
- Generated 11 ip in 0.199 seconds
- Ip range parsed... 11 ip found
- Scan on 25 started...
- 0:192.168.1.0 -> Network is unreachable
- 3:192.168.1.3 -> Connection refused
- 2:192.168.1.2 -> Connection refused
- 1: 192.168.1.1 -> 220 zeus.olimpo.hm ESMTP Postfix (Debian/GNU)
- 6:192.168.1.6 -> No route to host
- 5:192.168.1.5 -> connected but no data retrived within 7 sec
- 4:192.168.1.4 -> No route to host
- 8:192.168.1.8 -> connect timeout after 15
- 7:192.168.1.7 -> No route to host
- 9:192.168.1.9 -> No route to host
- 10:192.168.1.10 -> No route to host
- Waiting for child dead...
- Scanned 10 ip in 3.14821 seconds
- Scan ended... enjoy the result
Enhancements:
- added T and I option,
- added changelog,
- added debian rules,
- added man page,
- Makefile created.

AntiVirus Scanner is an anti-virus scanner for Endeavour Mark II that uses the ClamAV library (libclamav).

AntiVirus Scanner allows you to create a list of scan items for frequently scanned locations and features easy virus database updating, all in a simple GUI environment.

DNA (Deep Network Analyser) is an open, flexible, and extensible deep network analyzer server and software architecture for passively gathering and analyzing network packets, network sessions, and applications protocols.
Deep Network Analyser project is designed to be used for Internet security, network management, intrustion detection, protocol and network analysis, information gathering, and network monitoring applications.
Main features:
- Extensible Java based network sensor (processing layers 2-7)
Configurable processing and output:
- Packet flows like Ethereal
- IP Flows like CISCO netflow
- Stateful Sessions (client/server flow pairs)
- Application protocol element output
- Configurable and extensible application protocol element parsing.
- Application protocol parsing toolkit APIs allows for new protocol parser to be easily developed and extended
- Targeting based full session capture facility, like a realtime targeted TCPDump.
- Flexible targeting from IPAddr, Port tuple to Application sensitive targeting.
- Configurable and extensible output forwarding (file, DB, Streams, JMS, RMI, etc.)
- Extensible realtime collection portable to many OS/Packet processing environments
Easily adaptable to packet processing environments:
- Specialized linux drivers mechanismon
- Network Appliances
- Network Switches / Routers
- Highly mutithreaded for increased performance over multi processor environments
Enhancements:
- Adoption of OpenAdaptor(tm) as the Output Adapter mechanism.
- Support for local-only administration.
- A new targeted packet capture parser, new run scripts, and a new install mechanism.
- Many bugfixes.