Nmap Announce mailing list archives
Re: Announce: ndiff-0.02 is available
From: "Alek O. Komarnitsky (N-CSC)" <alek () ast lmco com>
Date: Thu, 21 Sep 2000 11:56:02 -0600 (MDT)
From: James Levine <jdl () vinecorp com> Subject: Announce: ndiff-0.02 is available To: nmap-hackers () insecure org NDiff 0.02 is available. NDiff compares two nmap scans and outputs the differences. It allows monitoring of your network(s) for interesting changes in port states and visible hosts. NDiff should be useful to network administrators, security analysts, and other interested parties who need to monitor large networks in an organized fashion. NDiff may be retrieved from: http://www.vinecorp.com/ndiff/NDiff-0.02.tar.gz ftp://ftp.vinecorp.com/pub/ndiff/NDiff-0.02.tar.gz
FYI FWIW, I wrote nmap-web-CLI (a command line interface to nmap-web) for the express purpose of doing periodic diffs to see if any port configurations have changed. My stuff was super-duper simple, but looks like James has done a much more extensive job than I did.
From personal experiece, this type of tool to automatically
baseline/check/audit your network(s) is a REALLY SMART thing to do; basically Tripwire" type functionality for nmap! ;-) Kudo's to James for writing this and making it available, alek -------------------------------------------------- For help using this (nmap-hackers) mailing list, send a blank email to nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).
Current thread:
- Announce: ndiff-0.02 is available James Levine (Sep 20)
- <Possible follow-ups>
- Re: Announce: ndiff-0.02 is available Alek O. Komarnitsky (N-CSC) (Sep 21)