Re: Modem detection in a LAN

From: Jacek Lipkowski (sq5bpf@acid.ch.pw.edu.pl)
Date: 03/08/02 

Date: Fri, 8 Mar 2002 22:06:04 +0100 (CET)
From: Jacek Lipkowski <sq5bpf@acid.ch.pw.edu.pl>
To: Olivier Busolini <olivier.busolini@netcourrier.com>

On Fri, 8 Mar 2002, Olivier Busolini wrote:

> I have been very interested by the information found, and I am now looking
> for a simple automated tool that could be run to detect a modem connected to
> an *nix or windows machine in a LAN.

If you have a dhcp server on the network look at the dhcp client ID's.
A standard NT box will reserve a pool of IPs for modems. The client
identifiers for those leases will start with 0x52 0x41 0x53 or "RAS". This
should also be true for win2000. Also, someone told me once that windows
platforms broadcast some junk to the network periodically when they have a
modem attached (probably some plug and pray mechanism).

For unix boxes you could try a script that greps /etc/inittab for unusual
getty entries (if you have access to those machines).

Still wardialing is your best bet.

jacek

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: blind demodulation - sound card - lucent winmodem - new topics
    ... I've finally understood that my usual sb16 can be used to emulate a modem. ... via sound card can trasfer v34 data but do not states how to do it. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: Wardialing
    ... >> achieving the connection with the modem. ... >This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)