Home → Questions →

Arachni changed communication port after scan get started?

• Edit

Shang Wang

22 Aug, 2013 08:11 PM

Hi Tasos:

I have a question regarding the port change of arachni. I see that arachni_rpcd is running on port 7331, and I have two amazon ec2 instances and the scanner machines opens the inbound port 7331 open to the machine that sends rpc command. However, after I issue command dispatcher.dispatch, it returns another port, then all the rest of the communication is gone. I assume that arachni switched to that port for communication because we don't have that port open so firewall blocks all the communication later on. We never run any of this on amazon before, and there were not so many firewall restrictions on other instances. Am I having the right inspection on the port issue? How do we fix the port that we will use? Thanks.

1. Support Staff 1 Posted by Tasos Laskos on 22 Aug, 2013 08:27 PM

   

   Are you saying that after issuing dispatcher.dispatch the Dispatcher stops responding or that you can't connect to the dispatched Instance?

   • Edit

2. 2 Posted by Shang Wang on 22 Aug, 2013 08:34 PM

   

   I think Dispatcher stops responding, and I did some more research and I opened all ports 1024~65535, and the connection comes back again.

   • Edit

3. Support Staff 3 Posted by Tasos Laskos on 22 Aug, 2013 08:38 PM

   

   That's weird...nothing changes after the dispatch call, if you could communicate with it before you should be able to keep communicating with it.
   I can't help with this, you better talk with EC2 support.

   • Edit

4. Tasos Laskos closed this discussion on 22 Aug, 2013 08:38 PM.

5. Shang Wang re-opened this discussion on 22 Aug, 2013 08:43 PM

6. 4 Posted by Shang Wang on 22 Aug, 2013 08:43 PM

   

   Sorry if I confuse you, I can show you the output from the dispatcher:
   Received Message:

     token: 1cf152dfa3aa307fa7c8588485413e0d
     pid: 31442
     port: 35116
     url: 0.0.0.0:35116
     owner: unknown
     birthdate: 2013-08-22 19:56:36.654228 -00:00
     starttime: 2013-08-22 20:40:58.814448 -00:00
     helpers: {}

   What is that port in the response used for?

   • Edit

7. Support Staff 5 Posted by Tasos Laskos on 22 Aug, 2013 08:47 PM

   

   That's the port of the Instance that was dispatched to you, you use that Instance to perform the scan.

   • Edit

8. Tasos Laskos closed this discussion on 17 Sep, 2013 06:01 PM.