RE: Port Scanner Reports

[Michael Gargiullo <mgargiullo () pvtpt com>]

-----Original Message-----
> Jeff Brossette wrote:
> > All,
> >
> > I am looking for a port scanning tool (software or hardware, open
> > source or commercial) that I can configure to run on a regularly
> > scheduled basis, say
> > once a week or once a month, for around 500 internal servers and
> > workstations (Unix/Linux, Windows and Novell).
> >
> > The goal is to produce a "diff" report that will identify any new
> > ports that have been opened on any of the servers or workstations
from
> > the previous scan.
> >
> > This would need to be a completely automatic process that would
email
> > out the results after each scan cycle.
> >
> > Are there any products that can perform this task?
>
> The best [IMHO] is nmap, you can save the output, use cron to
> schedule it at different times, then use diff to view the
> changes. That way, you can create a history.
>
> If nmap is too complicated, use nmapfe [nmap front end] to
> generate the command line and plug in cron.
>
> Products like GFI scanner, create beautiful web pages to show the
> customer, "but nmap is still the king."
>
>
> --
> Thanks
> http://www.911networks.com
> When the network has to work Cisco/Microsoft

<snip>

I ended up writing a perl wrapper around nmap to feed IP addresses from
a database, and store the nmap output into a different table.  This way
I can query the database and pull a custom diff based on scan date.  I
also do this with nessus scans.

All you need in Linux, perl, mysql, and nmap.

-Mike


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------