Re: [NSE] snmp-ios-config - Config grabber

[Fyodor <fyodor () insecure org>]

On Tue, Jan 18, 2011 at 10:55:06AM -0800, David Fifield wrote:
> So, Cisco SNMP-using users, is this a script that you will use?
> I want to know if this is generally useful enough to include with Nmap,
> or if there will be few enough users that it's better to just grab it
> from the mailing list. Would you use it even if you have to set up a
> TFTP server, or would you only use it if Nmap could automatically
> collect the TFTP replies?

If the user has to go through all the effort of starting up a TFTP
server and pre-creating the configure file, I think they might as well
download the script (from the mailing list archive) themselves too.
Maybe we should set up an "NSE contrib" space on SecWiki at some point
where people can describe and post and maintain their own scripts
which might currently be too obscure, incomplete, or experimental to
ship with Nmap by default.  That avoids the seclists.org problem of
people downloading old versions without realizing that newer versions
were posted later.  It might be a good testing ground for new scripts
too, and web logs could help identify scripts which are so popular
that we should try to put them in Nmap proper.

I do think this is useful funcionality and would be worth including in
Nmap if it can be made to handle the TFTP server aspect or if there is
another way to obtain the conf file over SNMP (without involving
TFTP).

Cheers,
Fyodor
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/