SQL Server port domain scan.

  • I am trying to figure out a way to scan my domain for all sql servers and find the port listening on.

    Is this info in the regisgtery with sql + port? 

  • In HKLM/Microsoft/MSSQLServer/MSSQLServer/SuperSocketNetLib there's a TCP key and a TCPPort flag below that you can scan. That's W2K, not sure about other versions.

    You can use some port scan tool, like nmap, to scan your network. Not sure how it will scan non-standard ports. The best thing is to require SQL srevers to be on specific ports, set a standard for named instances, and then scan those ports. You can use firewalls to cut down traffic between subnets to enforce this. Other than that, not sure how easy it is to detect SQL Servers. You'd have to scan all ports for the listener.

  • Steve, Many thanks.

    In my network, our standards installation is port 1433.  I am trying to find sql server that are installed without our consent.  Scanning all ports is the only way so far.

    Arun.

  • Have you tried SQLPing?  http://www.sqlsecurity.com/faq.asp

    or isql -L or osql -L ?

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply