How To Check Type Of Service On Port With Netcat

Introduction

Linux is known for having a great number of mature, useful command line utilities available out of the box in virtually distributions. Oft, organisation administrators can do much of their work using the built-in tools without having to install boosted software.

In this guide, we will discuss how to employ the netcat utility. This versatile command tin assist y'all in monitoring, testing, and sending data across network connections.

Netcat should exist available on almost any modern Linux distribution. Ubuntu ships with the BSD variant of netcat, and this is what nosotros will be using in this guide. Other versions may operate differently or provide other options.

General Syntax

By default, netcat operates by initiating a TCP connectedness to a remote host.

The near bones syntax is:

                                    netcat                [options]                host                port

This volition attempt to initiate a TCP connexion to the defined host on the port number specified. This functions similarly to the old Linux telnet command. Keep in mind that your connection is entirely unencrypted.

If y'all would similar to transport a UDP packet instead of initiating a TCP connection, you tin can use the -u selection:

                                    netcat -u                host                port

You can specify a range of ports by placing a nuance between the outset and last:

                                    netcat                host                startport-endport

This is more often than not used with some additional flags.

On most systems, we can use either netcat or nc interchangeably. They are aliases for the same control.

How To Use Netcat for Port Scanning

One of the most common uses for netcat is as a port scanner.

Although netcat is probably not the most sophisticated tool for the chore (nmap is a meliorate pick in about cases), it tin perform elementary port scans to easily identify open ports.

We practise this by specifying a range of ports to browse, as we did above, forth with the -z option to perform a scan instead of attempting to initiate a connection.

For example, we can browse all ports upward to grand by issuing this control:

                                    netcat -z -five                domain.com                one-1000

Along with the -z choice, we have also specified the -5 pick to tell netcat to provide more than verbose information.

The output volition wait similar this:

                      Output
nc: connect to domain.com port one (tcp) failed: Connectedness refused nc: connect to domain.com port ii (tcp) failed: Connexion refused nc: connect to domain.com port iii (tcp) failed: Connection refused nc: connect to domain.com port four (tcp) failed: Connexion refused nc: connect to domain.com port v (tcp) failed: Connection refused nc: connect to domain.com port 6 (tcp) failed: Connection refused nc: connect to domain.com port seven (tcp) failed: Connection refused . . . Connection to domain.com 22 port [tcp/ssh] succeeded! . . .

As you can run across, this provides a lot of information and will tell you lot for each port whether a scan was successful or not.

If yous are actually using a domain name, this is the form y'all will accept to utilise.

Even so, your browse will go much faster if you know the IP address that y'all need. You can then use the -northward flag to specify that you do not need to resolve the IP accost using DNS:

                                    netcat -z -due north -five                                  198.51.100.0                1-chiliad

The messages returned are actually sent to standard error (see our I/O redirection article for more info). We can send the standard error letters to standard out, which will allow us to filter the results easier.

We will redirect standard error to standard output using the two>&1 fustigate syntax. Nosotros volition and then filter the results with grep:

                                    netcat -z -n -v                                  198.51.100.0                1-yard                                  2>                &1                |                grep                succeeded

                      Output
Connection to 198.51.100.0 22 port [tcp/*] succeeded!

Hither, nosotros tin can see that the but port open in the range of ane–1000 on the remote computer is port 22, the traditional SSH port.

How To Communicate through Netcat

Netcat is not restricted to sending TCP and UDP packets. It also can listen on a port for connections and packets. This gives usa the opportunity to connect ii instances of netcat in a client-server relationship.

Which computer is the server and which is the customer is merely a relevant stardom during the initial configuration. After the connection is established, advice is exactly the aforementioned in both directions.

On one machine, you can tell netcat to mind to a specific port for connections. We can exercise this by providing the -l parameter and choosing a port:

                                    netcat -l                4444

This volition tell netcat to heed for TCP connections on port 4444. As a regular (not-root) user, yous volition not be able to open any ports nether 1000, as a security measure.

On a second server, nosotros tin connect to the commencement machine on the port number we chose. We do this the aforementioned fashion we've been establishing connections previously:

                                    netcat                domain.com                4444

It will look as if nil has happened. However, you lot can now send messages on either side of the connection and they will be seen on either terminate.

Type a message and press ENTER. Information technology will announced on both the local and remote screen. This works in the reverse management as well.

When you are finished passing messages, you can press CTRL-D to close the TCP connection.

How To Send Files through Netcat

Edifice off of the previous instance, we can accomplish more useful tasks.

Because we are establishing a regular TCP connexion, nosotros can transmit just well-nigh any kind of information over that connexion. It is not limited to conversation messages that are typed in by a user. We tin utilize this noesis to plow netcat into a file transfer programme.

Once again, nosotros demand to choose one end of the connexion to heed for connections. Even so, instead of printing information onto the screen, as we did in the last example, we will identify all of the information straight into a file:

                                    netcat -fifty                4444                >                received_file

The > in this control redirects all the output of netcat into the specified filename.

On the 2nd reckoner, create a simple text file by typing:

                                                    repeat                "How-do-you-do, this is a file"                >                original_file

We can now use this file equally an input for the netcat connection we will establish to the listening computer. The file will exist transmitted just as if nosotros had typed information technology interactively:

                                    netcat                domain.com                4444                <                original_file

We can see on the computer that was awaiting a connection, that nosotros now have a new file called received_file with the contents of the file we typed on the other computer:

                                                    true cat                received_file

                      Output
Hello, this is a file

Equally you can see, by piping things, we can hands take advantage of this connection to transfer all kinds of things.

For example, we can transfer the contents of an entire directory by creating an unnamed tarball on-the-fly, transferring information technology to the remote organisation, and unpacking information technology into the remote directory.

On the receiving end, nosotros can anticipate a file coming over that volition need to exist unzipped and extracted by typing:

                                    netcat -l                4444                |                tar                xzvf -

The ending dash (-) means that tar will operate on standard input, which is beingness piped from netcat across the network when a connection is made.

On the side with the directory contents we want to transfer, nosotros can pack them into a tarball and and then send them to the remote computer through netcat:

                                                    tar                -czf - *                |                netcat                domain.com                4444

This time, the dash in the tar command means to tar and cipher the contents of the electric current directory (equally specified by the * wildcard), and write the result to standard output.

This is then written straight to the TCP connection, which is then received at the other end and decompressed into the current directory of the remote computer.

This is simply one example of transferring more circuitous information from one computer to some other. Another mutual thought is to use the dd command to prototype a disk on one side and transfer it to a remote computer. We won't be roofing this here though.

How To Use Netcat as a Elementary Spider web Server

We've been configuring netcat to heed for connections in social club to communicate and transfer files. We tin use this aforementioned concept to operate netcat as a very simple web server. This tin exist useful for testing pages that you lot are creating.

First, let'due south brand a simple HTML file on one server:

                                                    nano                index.html

Here is some simple HTML that you can use in your file:

index.html

          <html>         <caput>                 <title>Test Page</title>         </head>         <torso>                 <h1>Level 1 header</h1>                 <h2>Subheading</h2>                 <p>Normal text here</p>         </body> </html>

Save and close the file.

Without root privileges, you cannot serve this file on the default web port, port eighty. We can choose port 8888 equally a regular user.

If you merely desire to serve this page one time to check how it renders, y'all tin run the following command:

                                                    printf                'HTTP/1.1 200 OK\north\n%south'                "                    $(                    cat                    alphabetize.html)                  "                |                netcat -50                8888

At present, in your browser, you can access the content by visiting:

          http://server_IP:8888

netcat page served

This volition serve the page, and then the netcat connexion will close. If you lot attempt to refresh the page, it will be gone:

netcat page gone

We tin can have netcat serve the folio indefinitely by wrapping the terminal control in an space loop, like this:

                                                    while                true                ;                do                printf                'HTTP/one.1 200 OK\n\n%s'                "                    $(                    cat                    alphabetize.html)                  "                |                netcat -l                8888                ;                done

This will allow it to continue to receive connections after the kickoff connection closes.

We tin can cease the loop by typing CTRL-C on the server.

This allows you to see how a page renders in a browser, but information technology doesn't provide much more than functionality. You should never use this for serving actual websites. There is no security and uncomplicated things like links do non even piece of work correctly.

Conclusion

Y'all should at present accept a pretty adept idea every bit to what netcat can exist used for. Information technology is a versatile tool that can be useful to diagnose bug and verify that base of operations-level functionality is working correctly with TCP/UDP connections.

Using netcat, you can communicate betwixt unlike computers very easily for quick interactions. Netcat attempts to brand network interactions transparent between computers by taking the complication out of forming connections.