[unisog] New scanner based on UCONN NetReg scanner

Jordan Wiens jwiens at nersp.nerdc.ufl.edu
Fri Sep 19 18:49:16 GMT 2003


By the way, when I run it like so:

./rpcscan_sol -c 20 aa.bb.0.0/16 > aa.bb.txt&
tail -f aa.bb.txt

Eventually, I get lots of lines like:
	aa.bb.cc.dd Connect:Resource temporarily unavailable

I'm going to try it with less processes in the hopes that that helps.


-- 
Jordan Wiens, CISSP
UF Network Incident Response Team
(352)392-2061

On Fri, 19 Sep 2003, Russell Fulton wrote:

> Hi All,
> 	I have spent quite a lot of time over the last week reworking the
> Netreg scanner, in the process I have found that I have not forgotten as
> much C and low level socket stuff as I had assumed ;)  It is 10 years
> since I did this sort of stuff!
>
> The main thrust of this work was to get something that would work on
> Solaris, something that would run much faster than other other scanners
> available and would work on arbitrary CIDR blocks.
>
> Here is a chunk from the initial comments
>
> *    September '03
> *    modified to take a CIDR block --  Russell Fulton, Univeristy of Auckland
> *                                      <r.fulton at auckland.ac.nz>
> *       fixed bugs that caused it to run out of sockets
> *       rewrote argument handling to be more comprehensible and allow CIDR
> *       can now give a list of addresses...
> *       added improvements from Jordan Wiens <j w i e n s @ nersp.nerdc.ufl.edu
> *       ported to solaris ( non blocking sockets and selects -- yuk! )
> *        an supply domain name or IP
> *       changed all address computation to host based arithmetic and
> *        convert to network order
>
> Feedback and patches welcome.
>
> enjoy!
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rpcscan_sol.c
Type: text/x-csrc
Size: 16599 bytes
Desc: 
Url : http://www.dshield.org/pipermail/unisog/attachments/20030919/14d6d4b9/rpcscan_sol-0003.bin


More information about the unisog mailing list