Re: SNMP to nmap?

[Lamont Granquist <lamontg () raven genome washington edu>]

On Thu, 17 Dec 1998, Matthew Franz wrote:
> Personally I *don't* think SNMP should be included in nmap--it would be
> added bloat considering the size of the mib--especially v2.

I haven't seen Fyodor pipe up about this, so I'll speak ex cathedra about
it in the hopes that I don't get it wrong...

I talked with Fyodor about adding RPC service portscanning to NMAP, so
that NMAP would be able to query ports with null RPC commands to figure
out which RPC service was listening, if any (I haven't looked at RPC
closely enough to figure out if you could do this with one query, or if
you'd need to send queries for every service that you'd be interested in
knowing about, anyway...).  Fyodor's opinion was that NMAP should try to
stay away from doing 'application' level stuff as much as possible and
that the identd scanning and such in the current version was pushing it.

Anyway, I'd certainly think that RPC service scanning would be a hell of a
lot more generally useful than teaching NMAP about SNMP, but can
appreciate the sentiment behind not wanting to promote code bloat and not
wanting to do either of them.

So the answer to the original poster's question about SNMP+NMAP is
probably "nope, that's a job for a different program."

-- 
Lamont Granquist                       lamontg () raven genome washington edu
Dept. of Molecular Biotechnology       (206)616-5735  fax: (206)685-7344
Box 352145 / University of Washington / Seattle, WA 98195
PGP pubkey: finger lamontg () raven genome washington edu | pgp -fka