Penetration Testing mailing list archives

Re: Identifying Machines

From: Lance Spitzner <lance () honeynet org>
Date: Tue, 19 Jun 2001 08:49:02 -0500 (CDT)

On Mon, 18 Jun 2001, Rick Who Else? wrote:


I'm looking for as many ways as possible to identify machines on a network.
Considering ICMP is disabled, and all ports on the end machine are closed.


1. Go passive
http://project.honeynet.org/papers/passive.html

2. Go layer 2
http://www.iana.org/assignments/ethernet-numbers

lance

Current thread:

Identifying Machines Rick Who Else? (Jun 18)
- Re: Identifying Machines Blake Frantz (Jun 19)
- Re: Identifying Machines Don Tansey (Jun 19)
- Re: Identifying Machines Lance Spitzner (Jun 19)
- <Possible follow-ups>
- Re: Identifying Machines Rick Who Else? (Jun 19)
  - Re: Identifying Machines Jose Nazario (Jun 19)
  - Re: Identifying Machines Crist Clark (Jun 19)
    - Re: Identifying Machines Blake Frantz (Jun 20)
  - Re: Identifying Machines Ryan Russell (Jun 19)
- RE: Identifying Machines Yonatan Bokovza (Jun 19)
- Re: Identifying Machines Jeremy Sanders (Jun 19)
- Re: Identifying Machines Victor A. Rodriguez (Jun 19)