"ports" command

Pls. tell me how to use "ports" command in solaris 8 , with an example.
thanks in advanse
sansol

have you used it for configuring the ports . if yes; let me know the command syntax used.

Similar Messages

FTP/File Sender Adapter over SSL - 500 Illegal PORT command.

Hello Experts!
I'm trying to configure FTP Sender Adapter over SSL. This is the configuration I'm using:
Server: server01
Port: 21
Data Connection: Active
Timeout: 100
Connection Security: FTPS (FTP Using SSL/TLS) for Control and Data Connection
Command Order: AUTH TLS, USER, PASS, PBSZ, PROT
I have imported ftp server certificate into TrustedCAs key store. When the sender adapter tries to connect it receives the error 500 Illegal PORT command when getting files list.
This is an excerpt of the logs of connection steps:
#Plain##ftp server returns reply '220 Restricted Access. All Actions are monitored.'#
#Plain##Detected 'AUTH TLS' command: Preparing TLS/SSL connection upgrade#
#Plain##'AUTH TLS' successful: Upgrading control channel to TLS/SSL#
#Plain##ftp server returns reply '234 Proceed with negotiation.'#
#Plain##ftp server returns reply '331 Please specify the password.'#
#Plain##ftp server returns reply '230 Login successful.'#
#Plain##ftp server returns reply '200 PBSZ set to 0.'#
#Plain##ftp server returns reply '200 PROT now Private.'#
#Plain##ftp server returns reply '215 UNIX Type: L8'#
#Plain##ftp server returns reply '200 Switching to ASCII mode.'#
#Plain##ftp server returns reply '250 Directory successfully changed.'#
#Plain##ftp server returns reply '500 Illegal PORT command.'#
Does anybody know how to solve it?
Thank you in advance!
Roger Allué i Vall

Ok! This is the maximum i could obtain:
Fri Dec 11 15:28:12 2009 [pid 15206] FTP response: Client "10.58.42.108", "220 Restricted Access. All Actions are monitored."
Fri Dec 11 15:28:12 2009 [pid 15206] FTP command: Client "10.58.42.108", "AUTH TLS"
Fri Dec 11 15:28:12 2009 [pid 15206] FTP response: Client "10.58.42.108", "234 Proceed with negotiation."
Fri Dec 11 15:28:12 2009 [pid 15206] FTP command: Client "10.58.42.108", "USER iubsint"
Fri Dec 11 15:28:12 2009 [pid 15206] [iubsint] FTP response: Client "10.58.42.108", "331 Please specify the password."
Fri Dec 11 15:28:12 2009 [pid 15206] [iubsint] FTP command: Client "10.58.42.108", "PASS <password>"
Fri Dec 11 15:28:12 2009 [pid 15205] [iubsint] OK LOGIN: Client "10.58.42.108"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "230 Login successful."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PBSZ 0"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "200 PBSZ set to 0."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PROT P"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "200 PROT now Private."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "SYST"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "215 UNIX Type: L8"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "TYPE I"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "200 Switching to Binary mode."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "CWD /interfaces"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "250 Directory successfully changed."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PORT 10,58,45,108,159,112"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "500 Illegal PORT command."
I think we found the problem though. FTP Administrator says this is wrong:
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PORT 10,58,45,108,159,112"
it should be
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PORT 10,58,42,108,159,112"
Something is making SAP PI to take a wrong ip address (This server has two).
I'll let you know if we solve it!!
Thank you!!!

FTP Server in FXP mode : PASV / Illegal PORT Command

Hello,
In our workflow, we transfer the media files with the FTP protocol in mode FXP (server to server), the commands are initiated by an automation system.
This system work with the plateforms windows (serv-u), linux (vsftpd), osx (tnftpd) but it's impossible on a osx server (xftpd). The aim is to write file on our Xsan.
The error is an illegal PORT command, when the automation system sent the IP adress of the other server.
For test, If the IP adress of the destination server is the same that the automation server, the transfers are good, the PORT command is accepted.
But in our case, the ip adress, is a other server...
We can't to run the ftp server in FXP mode, and I do not want to install a Pureftp for to replace the tools included with osx server (and server admin).
I think that's is possible, because this workflow works on a osx after we have modify the ftpd.conf (checkportcmd off).
We not found in the file ftp access and nothing on the Internet, that's why I write on this board.
I need your help, anyone have a solution, it's really important ?
Thank you very much.
Franck

Hello Franck,
I'm attempting the same thing. Did you find a solution to your problem?

FTP server: PORT command not supported??

Hi,
In a nutshell - we are trying to set up PASV -- PORT connection between a Tiger server (10.4.11) and another system (say it's a windows FTP server). Issuing a PORT command to a Tiger FTP server fails with this error:
-> PORT 192,168,11,3,199,158
<- 500 Invalid PORT command
I have done some research on the web and as far as I can see - this is just a feature that is disabled in Mac OS X ftp server.
What's strange is that "features" command states that PORT is supported.
Has anyone seen PORT command work for a Tiger Server ftp daemon?
Has anyone succeeded enabling this command on a Tiger server?
Can you recommend another FTP server that works well on a Tiger server?
Thanks a million,
Darius

Passive (PASV) and Port (PORT) mechanisms are orthagonal.
If you're working with PORT, then you're almost certainly trying to clear through one or more firewalls. And a firewall can also trigger the Illegal Port Command error for a PORT command.
(Though I don't see a PORT command in the Mac OS X ftp client. I've checked a couple of clients, and it isn't common to expose it.)
ftp is a mess. Insecure, difficult to configure, insecure, firewall unfriendly, insecure, and slow. And did I mention insecure?
(No, I'm not a big fan of ftp.)
Some reading material:
http://www.cert.org/techtips/ftp_portattacks.html
http://www.slacksite.com/other/ftp.html
http://cr.yp.to/ftp/security.html
As for a suggestion, chuck ftp and switch to sftp.

FTP : 502 Illegal PORT Command

I'm developing a simple ftp client from the socket level , the program runs just fine in Solaris but not in the window XP. As the program sent a "PORT 10,100,151,180,5,201" to the ftp server (a Solaris) then I get the "502 Illegal PORT Command" reply. This won't happen when it is in Solaris. The ftp provided by win XP works just fine in the same pc. what's wrong with my ftp client program ?
Pls help
Samuel

In terms of the Airport Extreme, is the Mac Mini Server currently set to the default host? If the Mac Mini Server is not currently set to the default host, this needs to be configured as such.
To set up the Mac Mini Server as the default host on the Airport Extreme:
1 Open AirPort Utility, select your wireless device, and then choose Manual Setup from the Base Station menu, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2 Click the Internet button, and then click NAT.
3 Select the “Enable Default Host at” checkbox if not already checked.
4 Enter the same IP address of the Mac Mini Server.
This works

CSS & Service Port Command

I am trying to fix a problem in our network that I believe to be caused by ephemeral ports originating on the CSS (tcp 6000-6063). My questions is as follows: what exactly does the "(config-service)port" command do? I trying to avoid using the above mentioned ports as destination port numbers (I thing?!). Would the following command accomplish this?
(config-service)port 6064 range 65535
If you have any questions or need further clarification just let me know. Thanks for the help guys.
bc

Gilles,
I'm attaching a diagram and config file to help explain what is happening.
In step 5 of the diagram when the webservers are responding to the request for content is where we encounter the issue. When the web boxes respond to the CSS with content they respond with incrementing source ports. These ports range from approx. 2000-65500. I am thinking that the CSS doesn't really care what the actual source port of the internet user is and assigns a source port from the incrementing range I described above. When the checkpoint FW see ports in the 6000-6063 range it recognizes them as X11 traffic and denies it b/c it is considered a security risk (or at least thats what I assume). When these packets are denied we lose access to those webservers for about 2 minutes untill the ports cycle out of the X11 range. I've also attached a screenshot of some of the loggs so that you can see the incrementing port numbers.
I have two possible soutions for this problem. The first is to add an extra rule in the FW and the second is to somehow exclude the 6000-6063 range in the CSS. Let me know if you have any further questoins. Thanks.
bc

Mac 10.9.1 port: command not found

Howdy,
I'm fairly new to Mac, at least it hs been years since I used my G3 tower. I am a school teacher, teaching Web Tech to high school students. I've got a Linux Server(Ubuntu 10.10) and have set-up Apache2 and vsftpd for them to work on. It is a local(inside the school's firewall) only set-up. I've been teaching students how to build web pages and ftp on to their chrooted folder inside Apache2 tp push their work. The school purchased a Mac mini-tower(Maverick - 10.9.1) for meto work with and configure for the next year's classes. I'm very used to command line and I am trying to download "vsftpd" to install so I can get a chrooted environment. I tried:
sudo port install vsftpd
and got port: command not found. I even did, man port...and got.... No manual entry for port
I am simply looking to install vsftpd to config for chrooting reasons.
Also, I'm still working on the complete command line of useradd for the following. I'd like to only give them "ftp" access to (local IPaddress -> 10.127.X.X/username) with no shell access(I made a link to /sbin/ftplogin which I assume does nothing) with NO naviagtion abilities within ftp besides their own folder.
Thanks!!!

Thank you. I'm so used to apt-get or Synaptic, I don't know how to install anything from a Mac command line. I searched the Internet for MacPorts and found it and followed the basic installation. All is good. Thanks again !!!

FTP Server: PASV / Illegal PORT Command Issues

Hi,
I'm hoping someone can shed some light on this.
We have an iMac running 10.6.6 server with the FTP service running. Everything has worked fine for the last 6 months, including an office move (new IPs, etc) but suddenly in this last week, a lot of users (internal and external) are getting an "Illegal PORT Command" error when connecting.
The iMac is behind an Airport firewall with ports 20 and 21 forwarded to the server.
From what I've read the issue is a NAT related but I can figure out how to fix. The weird thing is that none of us here can think of any changes we've made on the server or Airport in the last week.
I've tried a mismatch of rules in the ftpaccess config file in /Library/FTPServer/Configuration/:
passive address external_ip 0.0.0.0/0
pasv-allow all 10.0.1.1/24
passive ports 10.0.1.1/24 54350 65535
with no success.
Debug from transmit when connecting:
Transmit 4.1.5 (x86_64) Session Transcript [Version 10.6.6 (Build 10J567)] (11-02-24 2:10 PM)
LibNcFTP 3.2.3 (July 23, 2009) compiled for UNIX
220: server.private FTP server ready.
Connected to domain_name
Cmd: USER username
331: Password required for username.
Cmd: PASS xxxxxxxx
230: User username logged in.
Cmd: TYPE A
200: Type set to A.
Logged in to domain_name as username.
Cmd: SYST
215: UNIX Type: L8 Version: BSD-199506
Cmd: FEAT
211: Supported features:
REST STREAM
ADAT
AUTH
CCC
CONF
ENC
MIC
PBSZ
PROT
MDTM
UTF8
SIZE
End
Cmd: OPTS UTF8 ON
200: UTF-8 encoding enabled
Cmd: PWD
257: "/" is current directory.
Cmd: PASV
425: Can't open passive connection: Can't assign requested address.
Passive mode refused.
Connection falling back to port (PORT) mode.
Cmd: PORT 10,0,1,6,250,79
500: Illegal PORT Command
Cmd: PORT 10,0,1,6,250,80
500: Illegal PORT Command
Cmd: PORT 10,0,1,6,250,81
500: Illegal PORT Command
Cmd: PORT 10,0,1,6,250,82
500: Illegal PORT Command
Disconnecting from server…
Cmd: QUIT
221: You have transferred 0 bytes in 0 files.
Total traffic for this session was 187 bytes in 0 transfers.
Thank you for using the FTP service on server.private.
Goodbye.
Anyone know what I can try?
Thanks.
Message was edited by: s-chilly

In terms of the Airport Extreme, is the Mac Mini Server currently set to the default host? If the Mac Mini Server is not currently set to the default host, this needs to be configured as such.
To set up the Mac Mini Server as the default host on the Airport Extreme:
1 Open AirPort Utility, select your wireless device, and then choose Manual Setup from the Base Station menu, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2 Click the Internet button, and then click NAT.
3 Select the “Enable Default Host at” checkbox if not already checked.
4 Enter the same IP address of the Mac Mini Server.
This works

500 invalid port command

I have a large site that changes monthly _ I keep getting a
FTP 500 invalid port command message and the file does not upload
which means I have to go through the whole thing manually.( I'm
using Dreamweaver MX). I gather this is a Windows problem - does
anyone know of a fix
Many thanks for any advice

After a client initiates an FTP session, the server establishes a new back connection to the client. This connection extends from the server (outside the firewall boundaries) to a dynamically allocated port number on the client computer. Because the port number is not known in advance, old packet filters open the entire range of high-numbered ports (greater than 1023) for incoming connections. This reconnection at a higher port is done with the following FTP command:
This reconnection at a higher port is done with the following FTP command:
port h1, h2, h3, h4, p1, p2
The values of h1 through h4 are octets of the client IP address. The last two values of p1, and p2 are used to determine the port. The following formula is for p1, and p2:
p1 X 256 + p2 = port
If the Firewall Network Address Translation (NAT) does not correctly change this IP address (h1 through h4), the server generates the error message.
The following sample command is an example of a port command:
port 10,20,30,40,5,25 = (IP Address: 10.20.30.40 / Port: 1305)

Administration Port / command line / console gui question

In the Admin_ref.pdf doc it says "After enabling the administration port, all Administration Console traffic must connect via the administration port". Does this mean that you can no longer use the web gui console to manage the servers?
I would like the option to script deployments (deploy ears, stop start servers etc.) via command line to reduce the possibility of user error during routine deployments.
I do config mgmt. and am not a developer so I may be getting hung up on the language here.
Thanks,
gj

Hi
For first question the answer is no. With the administration port, you enable the SSL between the admin server and Node manager-managed Servers. You can still use the web console.
For teh second question, you can use ANT or can use the WLS Scripting ..you can get more details in dev2dev.bea.com
Jin

VISA (Serial port) commands fail in the VI, but work in VISA test panel

Hi, I have an instrument which has a usb connection. When I connect it to a Windows 7 PC, it automatically picks up the driver and shows up as a "USB Serial Port (COM7) (Manufacturer is FTDI).
When I open up NI MAX, this device shows up as COM7 (ASRL7::INSTR) under "Serial and Parallel". And, when I click on Open VISA Test Panel, and try the "*IDN?" command, it works OK.
However, the VI (which just sends a VISA command "*IDN?") gives me a time out error (0XBFF0015) or a device/resource not present error ( 0XBFFF0011). Attached is a screenshot of the VI.
Any ideas why?
Thanks.
PS: I went through the process to create the VISA-USB driver, but that has some other issue, but I am trying to understand why this occurs. This device also has a GPIB port and when I use a USB-GPIB adapter, it works very well.
Solved!
Go to Solution.
Attachments:
problem_vi.JPG ‏24 KB

SysB1 wrote:
Hi, I have an instrument which has a usb connection. When I connect it to a Windows 7 PC, it automatically picks up the driver and shows up as a "USB Serial Port (COM7) (Manufacturer is FTDI).
When I open up NI MAX, this device shows up as COM7 (ASRL7::INSTR) under "Serial and Parallel". And, when I click on Open VISA Test Panel, and try the "*IDN?" command, it works OK.
However, the VI (which just sends a VISA command "*IDN?") gives me a time out error (0XBFF0015) or a device/resource not present error ( 0XBFFF0011). Attached is a screenshot of the VI.
Any ideas why?
Thanks.
PS: I went through the process to create the VISA-USB driver, but that has some other issue, but I am trying to understand why this occurs. This device also has a GPIB port and when I use a USB-GPIB adapter, it works very well.
Look up the examples that ship with LabVIEW. What you have there isn't quite complete - for serial VISA. While GPIB will work great with what you have, serial VISA requires you to configure your serial port and is a little more complicated to read.
Bill
(Mid-Level minion.)
My support system ensures that I don't look totally incompetent.
Proud to say that I've progressed beyond knowing just enough to be dangerous. I now know enough to know that I have no clue about anything at all.

Slow waveform reading time when digitizer is combined with serial port command

Hi All,
I'm using Digitizer PCI-5112 to capture and differenciate waveforms. The waveform measurement from NIScope will be used to determine the command to be sent to Newport ESP 300 motion controller.
When I run read.vi the digitizer will read the waveforms in a high speed as I wanted. For the same waveform, when I combined read.vi with command to ESP 300 (becomes control.vi) the waveform reading becomes very slow (approximately only 1 waveform per second). Is this happened because of hardware limitation of ESP 300 ? Is there anything wrong with my program to send the command to ESP 300? or Is there any other way so I can keep reading the waveform in a high speed? I realize may be this is because I put the waveform reading part and sending command part in the same loop. But I don't know any other way to do this. I would appreciate any clue or answer. Thank you very much.
Attachments:
control.vi ‏156 KB
read.vi ‏108 KB

Hi Dennis, Thank you for the response.
Sorry, I forgot to attach Positioning.vi at my previous message. This Positioning.vi is used to read the position of the axis. I think I get what you mean, I've tried to remove the while loop for the Positioning.vi but it didn't give any effect. Could you kindly check this positioning.vi for me?
Actually this is my first time communicating Labview with motion controller. I got those functions from my colleague. Is there any example or library I can refer for the 'normally used' serial functions? (my connection is RS232) It would be very helpful for me.. Thanx
Attachments:
Positioning.vi ‏18 KB

Disable scanner through serial port command

Hello,
I am working on project where I need to disable scanner device temporarily and enable back. When we deactivate scanner session at the most we do is serialPort.close(). This does not help as scanner is still sctivated and can beep on good scan. Scanner is connected to COM1.
any pointers are appreciated.

Moderator action: moved here for closer topic alignment.
However what you're asking seems to be dependent on the specific scanner and its protocol. Not a Java question. So I'm locking.

New command for radius-server source-ports

I am trying to find the new command fro radius-server source-ports 1645-1646 since it appears to be depricated. We use tacacs so we do not have the radius server specified but we do need to put in the ports. Can someone please tell me the new command for radius-server source-ports?
Thanks

Both of the links that Peter posted are interesting and helpful. I would like to take a slightly different approach in answering your question.
In every version of IOS there are certain commands that get inserted into running-config when a particular feature is activated. It looks like in your version the radius-server source-ports is one of those commands. I do not think it is anything that you should be concerned about.
And I do not believe that having the radius-server source-ports command would prevent TACACS from working. I believe that there is likely to be some fault in your configuration. If you would post the aaa parts of the config then maybe we could see what the problem is.
In my experience configuring aaa some of the common problems include not correctly identifying the TACACS server, not having exactly the same key configured on the Cisco device and the TACACS server, not having connectivity to the TACACS server (can the Cisco device ping the server, and can the server ping the device), or errors in the authentication or authorization prameters specified.
Post some information and we will see what we can do.
HTH
Rick

Unable to telnet on command prompt for udp port 514, but able to on cmd for tcp port 514

I am unable to telnet on command prompt for udp port 514. But when I use packet snifer or wireshark I am able to see traffic going to the targetted server from udp port 514. I thought it might be a firewall issue blocking the port from communicating. But
I figured out that windows firewall is disabled. I am able to make similar connections on the cmd for tcp port 514.
I did a netstat -an and see that udp:514 is enabled and listening on the server.
What am I missing here?

Telnet actually supports TCP only. You might want to try another tool as suggested here: http://serverfault.com/questions/263032/how-to-connect-to-a-udp-port-command-line
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

"ports" command

Similar Messages

Maybe you are looking for