Windows: quickly check if all ports of your servers are open

Installation & Configuration

1. Create a folder c:\it\bin and download ps-helpers.ps1 in it:

   $fname="ps-helpers.ps1"; mkdir C:\it\bin -force > $null; iwr -useb https://wiki.enlogic.gr/pub/KnowledgeBase/PublicFiles/$fname -OutFile c:\it\bin\$fname

2. Create a script like this (change the host and OpenPorts):

. c:\it\bin\ps-helpers.ps1

Test-NetConnectivityToHost -RespondsToPing:$true -Host AC      -OpenPorts 2382,3389,5896,10050,22001,22004,22099,47546
Test-NetConnectivityToHost -RespondsToPing:$true -Host AUDIT2    -OpenPorts 80,443,1433,3389,10050,47546
# ...

Use

• All good at first host
• One port not open on 2nd host
  
  

Linux Tool to explore a network and find open ports

1. Save this bash file e.g. to /opt/bin/status-network
2. Power off all non-important devices (e.g. workstations) and then use fping -g or nmap -sn to get a list of IPs that respond to pings. These should be servers, printers, access points, etc. Their IPs are expected to stay the same (that's usually true but exceptions exist -- e.g. DHCP printers).
3. Create a reference file with these commands :
   IPS_TO_SCAN="10.2.2.1 10.2.2.2 10.2.2.3 " #
   PORTS_TO_SCAN="22,80,443,3389" #
   nmap -T3 --disable-arp-ping -Pn --open -oG - -p $PORTS_TO_SCAN $IPS_TO_SCAN \
   | grep Ports | sed -e 's| State:.*||' -e 's|/open[^ ]*||g' -e 's| ([^)]*)||' | sort \
   > /var/log/net-status-REFERENCE.txt
4. Run the script and it should display an all good report (no red lines)
5. From now on every time you run this script it will print in RED any changes in pings that respond and ports that are open compared to the reference report. E.g. if a server/device stops responding to pings you'll see it. If a service that uses a TCP port stops working you'll also see it.

Notes

fping -r 2 -B 2.0 -t 25 -g 192.168.0.1 192.168.1.255 2>/dev/null | grep alive | tee /tmp/alive
# and maybe remove some IPs based on this:
cat /tmp/alive | sed -e 's/ .*//' |  xargs -i nbtscan "{}" 2>/dev/null | grep '[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]:'
IPS_TO_SCAN=`cat /tmp/alive | sed -e 's/ .*//'`