程式狂想筆記

一個攻城師奮鬥史

0%

檢查大量不同 IP 跟 Port 方法

發表於 更新於 分類於 Disqus：

最近要測試大量主機 Port ，看裡面東西有沒有開通
使用大量 telnet ip port 非常花很多時間
最近在想有沒有好用的工具方便我們檢查

建立多台 vagrant 連線

1
2
3
4
5
6
7
8
9
10
11
12
Vagrant.configure("2") do |config|
  config.vm.provision "shell", inline: "echo Hello"
  config.vm.define "web" do |web|
    web.vm.box = "ubuntu/xenial64"
    web.vm.network "private_network", ip: "192.168.50.2"
  end

  config.vm.define "db" do |db|
    db.vm.box = "ubuntu/xenial64"
    db.vm.network "private_network", ip: "192.168.50.3"
  end
end

nc 檢查法

1
2
3
4
5
6
7
8
9
10
11
12
$ timeout 2 bash -c "</dev/tcp/canyouseeme.org/80"; echo $?
0
$ timeout 2 bash -c "</dev/tcp/canyouseeme.org/81"; echo $?
124
$ timeout --preserve-status 2 bash -c "</dev/tcp/canyouseeme.org/81"; echo $?
143
$ nc -w 2 -v canyouseeme.org 80 </dev/null; echo $?
Connection to canyouseeme.org 80 port [tcp/http] succeeded!
0
$ nc -w 2 -v canyouseeme.org 81 </dev/null; echo $?
nc: connect to canyouseeme.org port 81 (tcp) timed out: Operation now in progress
1

Test if remote TCP port is open from a shell script - Stack Overflow

Bash/nc: netcat as a simple port scanner
Firxiao/check_service_ports: A tool (based nc) check service’s tcp or udp is opened or closed

1
2
3
4
5
6
7
for i in {10.21.xxx.yyy,10.21.xxx.yyy,10.23.xxx.yyy};
do
        for j in {5501,5502,5503,5504,7701,7702,7703,7704,5551,5552,5553,7771,7772,7773};
        do
                (echo > /dev/tcp/${i}/${j}) > /dev/null 2>&1 && echo "${i}:${j} :: it's getting connected" || echo "${i}:${j} :: it's not connecting"
        done
done

bash - Shell Script - telnet multiple hosts:ports - Stack Overflow
發現這個範例還滿適合我現在的需求
用這個 shell 小改，順便加個顏色Bash Shell 顯示 顏色的語法 | Tsung’s Blog

1
2
3
4
5
6
7
8
9
10
11
12
13
#!/bin/bash
COLOR_REST='\e[0m';
COLOR_GREEN='\e[0;32m';
COLOR_RED='\e[0;31m';


for i in tw.yahoo.com google.com.tw;
do
        for j in 80 233;
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: it's getting connected${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: it's not connecting${COLOR_REST}"
        done
done

顏色 echo 需要加 -e
第一次看到 shell 可以用 {}包迴圈
不過只有單筆會有問題樣子
所以我這邊有簡單調整另外一種寫法

例外還有多種運用
第6期：使用nc批量做网络连通性测试 - 知乎

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
#!/bin/bash
# checking network connectivity

# IPs and ports to check
# Ignore blank lines and treat hash sign as comments
# comments will be kept as a comment of result
IP_PORT="
# local host 
127.0.0.1 22
127.0.0.1 21
# well known sites
www.google.com 80
www.baidu.com 80
"

# checking
echo "$IP_PORT" | grep -Ev "^$" |
while read line;do
  # simply print comment line
  echo "$line" | grep -qE "^#"
  if [ $? -eq 0 ];then
      echo "$line"
      continue
  fi

  # normal line with ip and port
  connectFlag="DOWN"
  nc -z -w 1 $line
  if [ $? -eq 0 ];then
      connectFlag="UP"
  fi

  printf "%-20s %5s %5s\n" $line $connectFlag
done

以下方案失敗 QQ
先留著

使用 ansible 方法

Ansible Playbook for network port checking from host level — OpenShift as example

有看到有人用 ansible 做出符合我的需求工具
這邊就順便驗證是否可以正常執行

ansible 安裝

window 不能安裝 ansible
Installing Ansible — Ansible Documentation
更多系統可以參考上面連結

1
2
3
4
sudo apt update
sudo apt install software-properties-common
sudo apt-add-repository --yes --update ppa:ansible/ansible
sudo apt install ansible

ansible

FAILED => Using a SSH password instead of a key is not possible because Host Key checking is enabled and sshpass does not support this. Please add this host’s fingerprint to your known_hosts file to manage this host.
ansible小结（四）ansible.cfg与默认配置 - 运维之路

host_key_checking = False

其他類似程式

Check Host - 小巧實用網路監控軟體 ~ 不自量力 の Weithenn

Ansible Playbook for network port checking from host level — OpenShift as example
Connectivity check WITH Ansible - DEV Community 👩‍💻👨‍💻
testing - Ansible: Other option available for telnet check of open ports? - DevOps Stack Exchange
Test if a server is reachable from host and has port open with Ansible - Stack Overflow
ansible-testing/test_tcp at master · willthames/ansible-testing
guerzon/ansible-netcat: Ansible proof-of-concept - netcat systemd service

Window 不使用 telnet 方法

1
2
#powershell
Test-NetConnection -ComputerName “www.google.com” -Port 443

不知道為什麼我朋友電腦不能使用telnet(有開啟設定)
後來發現有這個指令
利用PowerShell的Test-NetConnection來取代Telnet來檢查網站的Port有沒有被開啟 | by CarterTsai | Medium

多台電腦指令

1
2
3
'192.168.0.101','192.168.0.102','Computer-012' | Test-NetConnection -Port 135

Get-Content -Path .\computers.txt | Test-NetConnection -Port 1

更多相關:
Run Test-NetConnection on multiple machines, the best way：PowerShell
Test connection to servers on several ports - Powershellbros.com

工作用測 IP PORT 的腳本

記得把 IP1,IP2 關鍵字換成IP

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
#!/bin/bash
COLOR_REST='\e[0m';
COLOR_GREEN='\e[0;32m';
COLOR_RED='\e[0;31m';

echo "正式環境";

# 443
for i in {IP1,IP2,IP3};
do
        for j in 443;
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: 可以連結${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: 不能連結${COLOR_REST}"
        done
done

# 9101
for i in {IP1,IP2,IP3}
do
        for j in 9101;
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: 可以連結${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: 不能連結${COLOR_REST}"
        done
done

# 1549
for i in IP1
do
        for j in 1549;
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: 可以連結${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: 不能連結${COLOR_REST}"
        done
done


echo "驗證環境";


# 26112
for i in {IP1,IP2};
do
        for j in 26112;
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: 可以連結${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: 不能連結${COLOR_REST}"
        done
done

# 9101
for i in {IP1,IP2,IP3};
do
        for j in 9101;
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: 可以連結${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: 不能連結${COLOR_REST}"
        done
done


# 有兩個 port 1549,1561
for i in IP1;
do
        for j in {1549,1561};
        do
                (nc -zv -w 5 ${i} ${j}) > /dev/null 2>&1 && echo -e "${COLOR_GREEN}${i}:${j} :: 可以連結${COLOR_REST}" || echo -e "${COLOR_RED}${i}:${j} :: 不能連結${COLOR_REST}"
        done
done