ServiceNow IT Operations Management

Scanning or port scanning phase

TCP and UDP IP ports are scanned by discovery to determine the open ports and also try to get responses from the ports that are open. WMI, SSH, and SNMP are the protocols that discovery searches responses from. Port scanning results are finally posted into the ECC queue.

Discovery follows through these steps of scanning the ports:

1. Find IP addresses with open ports with WMI, SSH, and SNMP protocol:
   • Lists the IP address in Shazzam returns
2. No response from the port:
   • Does not list the IP address in the returns in Shazzam returns
3. Refused connection from the port:
   • Lists the IP address and ports that refused in Shazzam returns