Snort mailing list archives

Re: nmap scan settings for using with Hogger


From: Joel Esler <jesler () sourcefire com>
Date: Wed, 29 Sep 2010 15:31:54 -0400

It's in the readme file...

nmap -O -T4 -n [network]

        -O  Enables OS detection
        -T4 will do an aggressive scan of the subnet, if your network is
sensitive, you may want to ommit.
        -n  will cause nmap not to resolve DNS for this hosts.  DO NOT leave
this switch off, as currently
                the logic does not compensate for the existance of DNS names
in the output and will ommit
                hosts that have their IP resolved to DNS names.




On Wed, Sep 29, 2010 at 3:23 PM, Andy Berryman <aberryman () cymtec com> wrote:

What recommended nmap flags do you guys use when you scan with the
intention of importing it into Hogger?



Thanks,

Andy Berryman


 ------------------------------
 This message from Cymtec Systems, Inc. contains confidential information
and is solely for the use of the recipient(s) named above. If you are not
the intended recipient or an agent responsible for delivering it to the
intended recipient, you are hereby notified that you have received this
message in error and that any review, disclosure, copying, distribution or
use of the contents of this message is strictly prohibited. If you have
received this message in error, please destroy it immediately and notify
Cymtec Systems, Inc. by telephone at +1.314.993.8700 or by return e-mail.
 ------------------------------



------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: