Re: [NSE] snmp-ios-config - Config grabber

[David Fifield <david () bamsoftware com>]

On Thu, Feb 03, 2011 at 11:28:31PM +0100, Patrik Karlsson wrote:
> On 3 feb 2011, at 23.13, Thomas Buchanan wrote:
>
> > > -----Original Message-----
> > > From: Patrik Karlsson [mailto:patrik () labb1 com] On Behalf Of 
> > > Patrik Karlsson
> > > Sent: Wednesday, February 02, 2011 11:28 AM
> > > To: Vikas Singhal; Thomas Buchanan; David Fifield; Nmap-Dev
> > > Subject: Re: [NSE] snmp-ios-config - Config grabber
> > >
> > > I still haven't seen any debug results or packet captures of 
> > > cases where this doesn't work and since I can't reproduce the 
> > > problems myself I'm not making any progress here.
> > >
> > > Has anyone else been able to test yet?
> > >
> > > //Patrik
> >
> > Patrik,
> >
> > I had a chance to test your latest revision of the script and tftp
> > library, and it seems to work fine for me.  I even dug up another Cisco
> > box to run against, and got good results from that one as well.
>
> Ok, I'm happy to hear that.
>
> > The two Cisco boxes are quite different, and it takes one of them about
> > twice as long to build the running config and connect back to the TFTP
> > server.  This means that I haven't really been able to test how
> > effective the concurrency of the library is.  However, it seems to have
> > no problems handling the files as they come in:
>
> I've been emulating several identical routers and got data back more or less at the same time and it seems to work 
> good for me to.
>
> > Completed NSE at 15:53, 5.80s elapsed
> > Nmap scan report for 192.168.1.1
> > Host is up (0.00s latency).
> > PORT    STATE SERVICE VERSION
> > 161/udp open  snmp    SNMPv1 server (public)
> > | snmp-ios-config: 
> > | !
> > | version 12.4
> > <snip>
> > |_end
> >
> > Nmap scan report for 192.168.1.4
> > Host is up (0.00s latency).
> > PORT    STATE SERVICE VERSION
> > 161/udp open  snmp    SNMPv1 server (public)
> > | snmp-ios-config: 
> > | !
> > | version 12.3
> > <snip>
> > |_end
> >
> > Let me know if you want more details or would like to see any additional
> > output.
>
> Thanks for testing! I'm happy with the details. As far as I can tell,
> the script now works as intended.

It's been interesting to watch the development of this script. Let's get
this most recent version committed. It looks like there are a few more
minor enhancements possible, but the main functionality of the script is
ready.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/