Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: [NSE] snmp-ios-config - Config grabber
From: Vikas Singhal <vikas.programmer () gmail com>
Date: Mon, 21 Feb 2011 15:13:33 +0530

Hi Patrik,

My bad, it works just fine. Just test with three routers. Great job! :)


1) Where does it saves the file, as a user I can see from the output. I
think we should display it.
2) Printing the whole ios config takes a lot of space even for the lab/gns
routers, for prod env it will mess up the scan results. Can we tell basic
info like version,  username discovered, password7/plain password use,
interface count, snmp communities discovered etc. Let me know if that sounds
good, I will make the changes.

On Fri, Feb 4, 2011 at 3:58 AM, Patrik Karlsson <patrik () cqure net> wrote:

On 3 feb 2011, at 23.13, Thomas Buchanan wrote:

-----Original Message-----
From: Patrik Karlsson [mailto:patrik () labb1 com] On Behalf Of
Patrik Karlsson
Sent: Wednesday, February 02, 2011 11:28 AM
To: Vikas Singhal; Thomas Buchanan; David Fifield; Nmap-Dev
Subject: Re: [NSE] snmp-ios-config - Config grabber

I still haven't seen any debug results or packet captures of
cases where this doesn't work and since I can't reproduce the
problems myself I'm not making any progress here.

Has anyone else been able to test yet?



I had a chance to test your latest revision of the script and tftp
library, and it seems to work fine for me.  I even dug up another Cisco
box to run against, and got good results from that one as well.

Ok, I'm happy to hear that.

The two Cisco boxes are quite different, and it takes one of them about
twice as long to build the running config and connect back to the TFTP
server.  This means that I haven't really been able to test how
effective the concurrency of the library is.  However, it seems to have
no problems handling the files as they come in:

I've been emulating several identical routers and got data back more or
less at the same time and it seems to work good for me to.

Completed NSE at 15:53, 5.80s elapsed
Nmap scan report for
Host is up (0.00s latency).
161/udp open  snmp    SNMPv1 server (public)
| snmp-ios-config:
| !
| version 12.4

Nmap scan report for
Host is up (0.00s latency).
161/udp open  snmp    SNMPv1 server (public)
| snmp-ios-config:
| !
| version 12.3

Let me know if you want more details or would like to see any additional

Thanks for testing! I'm happy with the details. As far as I can tell, the
script now works as intended.



Patrik Karlsson

Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]