Penetration Testing mailing list archives
Re: Scanning Class A network
From: "Steve Micallef" <steve () binarypool com>
Date: Tue, 25 Oct 2005 06:36:12 +1000
Hi tarunthenut,
The scan needed to be carried out externally, and not from within the network to identify hosts and ports exposed to the Internet. The problem compounded cause of the following limitations : 1. ICMP was not allowed in the network
This isn't a big problem
2. The IP range was to be scanned every month for the entire port range fro=m 1-65535 for TCP & UDP
Scanning TCP using SYN scanning should be quite fast (make sure you're running nmap as root, otherwise it won't use SYN scanning), however there isn't much in the way of fast UDP scanning due to its connectionless nature, hence the scanner needs to send out a UDP packet and hope one comes back (or a 'port unreachable' ICMP message).
After searching for a suitable scanner which could scan such a large range in reasonable time, I could think of only nmap, nessus, superscan and ISS. But because of the limitations stated above,all the tools took a huge amount of time (ran into month).
You might want to check out Unicornscan. I haven't used it myself, but I've heard it's quite fast: http://www.unicornscan.org/main.html.
Cheers, Steve Micallefhttp://www.binarypool.com
------------------------------------------------------------------------------Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Re: Scanning Class A network, (continued)
- Re: Scanning Class A network Kurt (Oct 24)
- Re: Scanning Class A network David Eduardo Acosta RodrÃguez (Oct 24)
- Re: Scanning Class A network robert (Oct 24)
- Re: Scanning Class A network Mike Jones (Oct 24)
- Re: Scanning Class A network Justin (Oct 24)
- Re: Scanning Class A network Chris Byrd (Oct 24)
- Re: Scanning Class A network Matt Bellizzi (Oct 24)
- RE: Scanning Class A network Kyle Starkey (Oct 24)
- Re: Scanning Class A network Satanic.Brain (Oct 24)
- Re: Scanning Class A network R. DuFresne (Oct 24)
- Re: Scanning Class A network Steve Micallef (Oct 24)
- Re: Scanning Class A network Volker Tanger (Oct 24)
- RE: Scanning Class A network Talisker (Oct 25)
- Re: Scanning Class A network Adam Jones (Oct 26)
- RE: Scanning Class A network Brian Loe (Oct 26)
- Re: Scanning Class A network barcajax (Oct 24)
- RE: Scanning Class A network Jarmon, Don R (Oct 24)
- RE: Scanning Class A network Mike Thompson (Oct 24)
- RE: Scanning Class A network Josh Perrymon (Oct 24)
- RE: Scanning Class A network Derick Anderson (Oct 24)
- Re: Scanning Class A network Cesar Osorio (Oct 24)
(Thread continues...)