Re: Updated NetReg Scanners

[Richard Gadsden <gadsden () MUSC EDU>]

On Mon, 15 Sep 2003, Phil Rodrigues wrote:

> We have released a new version of rpcscan, version 0.3.  Last week's
> release was fast in case something nasty came out soon, this release
> attempts to be much more thorough.  It incorporates all of the changes
> people sent into us (thanks!!)...

Phil,

Attached is a suggested patch to add a new option (-f) for allowing the
list of target addresses to be read from a file.

This option adds flexibility over scanning an entire Class C or Class B,
at the obvious cost of needing to create the file of addresses first.

The following utility can be used to easily create a file containing all
of the IP addresses in a network, or a collection of networks:

 <http://people.musc.edu/~gadsden/tools/misc/subnet2ip.pl>

For example, let's say you want to scan an entire Class B network, but you
do -not- want to scan several dozen "fragile" legacy systems scattered
within that network. Just use subnet2ip.pl to create a file containing all
the IP addresses in your Class B, and then edit out those specific
addresses you do -not- want to scan. Now, with the -f option, you have an
easy way to scan the desired targets, and only the desired targets.

For example:

 $ echo "192.168.0.0/16" > mynet
 $ perl subnet2ip.pl < mynet > myips  (generate file with 65535 addresses)
 $ vi myips    (delete the specific addresses you do not want to scan)
 $ rpcscan -f myips

Thanks,
Richard

 --- o ---
 Richard Gadsden
 Director of Computer and Network Security
 Medical University of South Carolina
 Charleston, SC, USA

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Attachment: rpcscan-cli-03.patch
Description: Patch for adding -f option to rpcscan