Nmap Development mailing list archives

Re: [NSE] Minor feature enhancement for nbstat.nse


From: Ron <ron () skullsecurity net>
Date: Thu, 25 Feb 2010 17:49:17 -0600

Hey,
 
That's really cool! 

A thought on the similar vain -- is it possible to set the MAC address in Nmap from a script? And if not, can it be 
added? The same way we set the version and state for ports, it'd be useful to set the remote MAC address so Nmap (and 
other scripts) can use it. 

Ron

On Thu, 25 Feb 2010 12:09:28 -0600 "Thomas Buchanan"
<TBuchanan () thecompassgrp net> wrote:
Hello,

Here's a patch for nbstat.nse (and datafiles.lua) that adds the
ability to look up MAC address manufacturer information and display
it alongside the MAC address, similar to the way nmap does when
scanning IP addresses on a local network.  The patch add a capture
pattern and associated parse function for nmap-mac-prefixes to
nselib/datafiles.lua, and then utilizes that function in nbstat.nse
to lookup MAC address manufacturers.

Here's an example of how the output has been changed:

Without patch:
Host script results:
| nbstat:
|   NetBIOS name: LATITUDE, NetBIOS user: <unknown>, NetBIOS MAC:
00:1f:3c:6a:38:45
<snip>

With patch:
Host script results:
| nbstat:
|   NetBIOS name: LATITUDE, NetBIOS user: <unknown>, NetBIOS MAC:
00:1f:3c:6a:38:45 (Intel Corporate)
<snip>

Hopefully somebody else will find this useful, it's been a help to me
doing network inventory management.

Comments and questions regarding the patch are appreciated.

Thanks,

Thomas


-- 
Ron Bowes
http://www.skullsecurity.org
http://www.twitter.com/iagox86
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: