-端口对照表20=FtpData21=FTPOpenServer23=Telnet25=Smtp31=MasterParadise.8053=DNS,Bonk(DoSExploit)79=Finger80=Http110=Pop3113=AutherIdnet119=Nntp121=BOjammerkillah137=NetBios-NS138=NetBios-DGN139=NetBios-SSN143=IMAP161=Snmp162=Snmp-Trap194=Irc443=Https456=HackersParadise555=StealthSpy(Phase)666=AttackFTP1001=Silencer1001=WebEx1010=Dolytrojanv1.351011=DolyTrojan1015=Dolytrojanv1.51024=NetSpy.698(YAI)1025=NetSpy.6981033=Netspy1042=Bla1.11047=GateCrasher.b1047=GateCrasher.c1080=Wingate1243=SubSeven1245=Vodoo1269=Maverick'sMatrix1492=FTP99CMP(BackOriffice.FTP)1807=SpySender1981=ShockRave1999=Backdoor(YAI)1999=BackDoor.2001999=BackDoor.2011999=BackDoor.2021999=BackDoor.2031509=StreamingServer1600=Shiv2001=TrojanCow2023=PassRipper2140=DeepThroat.102140=Invasor2140=TheInvasor2283=Rat2565=Striker2583=Wincrash22801=Phineas3129=MastersParadise.923150=DeepThroat1.03210=SchoolBus4000=OICQClient4567=FileNail4950=IcqTrojan5000=Blazer55190=ICQQuery5321=Firehotcker5400=BackConstruction1.25400=BladeRunner5550=Xtcp5569=RoboHack5714=Wincrash35742=Wincrash6400=TheThing6669=Vampire6670=DeepThroat6711=SubSeven6713=SubSeven6767=NTRemoteControl6771=DeepThroat36776=SubSeven6883=DeltaSource6939=Indoctrination6969=Gatecrasher.a7306=NetMonitor(NetSpy)7307=ProcSpy7308=XSpy7626=木马冰河7789=ICQKiller8000=OICQServer9400=InCommand9401=InCommand9402=InCommand9872=PortalofDoom9875=PortalofDoom9989=InIkiller10167=PortalOfDoom10607=Coma11000=SennaSpyTrojans11223=ProgenicTrojan12076=Gjamer12076=MSH.104b12223=Hack?9KeyLogger12345=NetBus1.x12346=NetBus1.x12631=WhackJob.NB1.716969=Priotrity17300=Kuang220000=MilleniumII(GrilFriend)20001=MilleniumII(GrilFriend)20034=NetBusPro20331=Bla21554=GirlFriend21554=Schwindler1.8222222=Prosiak23456=EvilFTP23456=UglyFtp23456=WhackJob27374=SubSeven29891=TheUnexplained30029=AOLTrojan30100=NetSphere30303=Socket2330999=Kuang31337=BackOriffice31337=BackOrifficeLM.LEENTech31339=NetSpy31666=BOWhackmole31787=Hack'a'tack33333=Prosiak33911=TrojanSpirit2001a34324=TN34324=TinyTelnetServer40412=TheSpy40421=MastersParadise.9640423=MasterParadise.9747878=BirdSpy250766=Fore50766=Schwindler53001=RemoteShutdown54320=BackOrifice200054321=SchoolBus1.661466=Telecommando65000=Devil1,tcpmux,TCPPortServiceMultiplexer2,compressnet,ManagementUtility3,compressnet,CompressionProcess5,rje,RemoteJobEntry7,echo,Echo9,discard,Discard11,systat,ActiveUsers13,daytime,Daytime17,qotd,QuoteoftheDay18,msp,MessageSendProtocol19,chargen,CharacterGenerator20,ftp-data,FileTransfer[DefaultData]21,ftp,FileTransfer[Control],22,ssh,SSHRemoteLoginProtocol23,telnet,Telnet,telnet.exe,%a%p24,?,anyprivatemailsystem25,smtp,SimpleMailTransfer27,nsw-fe,NSWUserSystemFE29,msg-icp,MSGICP31,msg-auth,MSGAuthentication33,dsp,DisplaySupportProtocol35,?,anyprivateprinterserver37,time,Time38,rap,RouteAccessProtocol39,rlp,ResourceLocationProtocol41,graphics,Graphics42,nameserver,WINSHostNameServer43,nicname,WhoIs44,mpm-flags,MPMFLAGSProtocol45,mpm,MessageProcessingModule[recv]46,mpm-snd,MPM[defaultsend]47,ni-ftp,NIFTP48,auditd,DigitalAuditDaemon49,tacacs,LoginHostProtocol(TACACS)50,re-mail-ck,RemoteMailCheckingProtocol51,la-maint,IMPLogicalAddressMaintenance52,xns-time,XNSTimeProtocol53,domain,DomainNameServer54,xns-ch,XNSClearinghouse55,isi-gl,ISIGraphicsLanguage56,xns-auth,XNSAuthentication57,?,anyprivateterminalaccess58,xns-mail,XNSMail59,?,anyprivatefileservice60,?,Unassigned61,ni-mail,NIMAIL62,acas,ACAServices63,whois+whois+,64,covia,CommunicationsIntegrator(CI)65,tacacs-ds,TACACS-DatabaseService66,sql*net,OracleSQL*NET67,bootps,BootstrapProtocolServer68,bootpc,BootstrapProtocolClient69,tftp,TrivialFileTransfer70,gopher,Gopher71,netrjs-1,RemoteJobService72,netrjs-2,RemoteJobService73,netrjs-3,RemoteJobService74,netrjs-4,RemoteJobService75,?,anyprivatedialoutservice76,deos,DistributedExternalObjectStore77,?,anyprivateRJEservice78,vettcp,vettcp79,finger,Finger80,http,WorldWideWebHTTP,81,hosts2-ns,HOSTS2NameServer82,xfer,XFERUtility83,mit-ml-dev,MITMLDevice84,ctf,CommonTraceFacility85,mit-ml-dev,MITMLDevice86,mfcobol,MicroFocusCobol87,?,anyprivateterminallink88,kerberos,Kerberos89,su-mit-tg,SU/MITTelnetGateway90,dnsix,DNSIXSecuritAttributeTokenMap91,mit-dov,MITDoverSpooler92,npp,NetworkPrintingProtocol93,dcp,DeviceControlProtocol94,objcall,TivoliObjectDispatcher95,supdup,SUPDUP96,dixie,DIXIEProtocolSpecification97,swift-rvf,SwiftRemoteVirturalFileProtocol98,tacnews,TACNews99,metagram,MetagramRelay100,newacct,[unauthorizeduse]101,hostname,NICHostNameServer102,iso-tsap,ISO-TSAPClass0103,gppitnp,GenesisPoint-to-PointTransNet104,acr-nema,ACR-NEMADigitalImag.&Comm.300105,cso,CCSOnameserverprotocol106,3com-tsmux,3COM-TSMUX107,rtelnet,RemoteTelnetService108,snagas,SNAGatewayAccessServer109,pop2,PostOfficeProtocol-Version2110,pop3,PostOfficeProtocol-Version3111,sunrpc,SUNRemoteProcedureCall112,mcidas,McIDASDataTransmissionProtocol113,auth,AuthenticationService114,audionews,AudioNewsMulticast115,sftp,SimpleFileTransferProtocol116,ansanotify,ANSAREXNotify117,uucp-path,UUCPPathService118,sqlse