Re: [fw-wiz] scanning...

From: Oddbjørn Steffensen (oddbjorn_at_tricknology.org)
Date: 11/06/05

  • Next message: Nathaniel Hall: "[fw-wiz] Non-NAT Firewall" 
    To: "Paul D. Robertson" <paul@compuwar.net>
Date: Sun, 06 Nov 2005 20:55:42 +0100

    Paul D. Robertson wrote:
    > 5. Cheops-ng isn't too bad a place to start.

    Another tool to consider is Netdisco (http://www.netdisco.org/):

        "Netdisco is an Open Source web-based network management tool.

        Designed for moderate to large networks, configuration information and
        connection data for network devices are retrieved by SNMP. With Netdisco
        you can locate the switch port of an end-user system by IP or MAC
    address.
        Data is stored using a SQL database for scalability and speed.

        Cisco Discovery Protocol (CDP) optionally provides automatic
    discovery of
        the network topology. The network is inventoried by both device
    model and
        operating system (like IOS). Netdisco uses router ARP tables and L2
    switch
        MAC forwarding tables to locate nodes on physical ports and track
    them by
        their IP addresses. For each node, a time stamped history of the
    ports it has
        visited and the IP addresses it has used is maintained. Netdisco
    gets all its
        data, including CDP topology information, with SNMP polls and DNS
    queries.
        It does not use CLI access and has no need for privilege passwords.

        Security features include a wire-side Wireless Access Point (AP)
    locator."

    -oddbjørn
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Nathaniel Hall: "[fw-wiz] Non-NAT Firewall"