Nmap Development mailing list archives

Re: nmap crashes my appliance


From: "Hans Nilsson" <hasse_gg () ftml net>
Date: Mon, 11 Dec 2006 12:33:43 -1100

Well you could try deterimining why it crashes. Does it only crash when
scanning above port 34322 for example? And then customize your scan to
that.


On Mon, 11 Dec 2006 20:15:22 +0000, "DePriest, Jason R."
<jrdepriest () gmail com> said:
The funny thing is, the appliance is a firewall.  I guess that's
called 'failing open' (as in a circuit, if you are an electrical
engineer) or 'failing closed' if you are anyone else.

The firewall is no longer supported by the vendor.  It is a Symantec
Firewall/VPN 200 running the latest and last firmware update release
1, version 8F (from November 2005).

I was trying to get an OS signature out of it, but what do you submit
if scanning crashes it?

From the WAN side, you get no open ports at all and from the LAN side,
it varies depending on when it locks up.

Is a device like this even worth getting a fingerprint from?

I can slow the scan down and see if that helps any.

I already know what ports are supposed to be open on it (just port 80
for management), but that isn't enough to get a good fingerprint from.

-- 
+ + + NO CARRIER

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
-- 
  Hans Nilsson
  hasse_gg () ftml net

-- 
http://www.fastmail.fm - IMAP accessible web-mail


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: