Disco - Passive IP Discovery

From: Preston (pat_private)
Date: Wed Apr 30 2003 - 18:44:07 PDT

Next message: contactat_private: "Paros v2.1 for web application security assessment"

Previous message: Javier Fernandez-Sanguino: "Tiger security tool 3.x branch release"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

  First release of Disco - Passive IP Discovery and fingerprinting tool 
available for download.

Disco is a passive IP discovery utility designed to sit on segments 
distributed throughout a network to discover unique IP's on the network, 
in addition to IP discovery disco has the ability to passively 
fingerprint TCP SYN packets.  Disco was written to discover IP's on the 
network, fingerprint the packet if necessary, and load into the Gherkin 
Scan Manager (see: http://www.altmode.com/gherkin) database for targeted 
host scans (Gherkin support not quite ready for this release).

Disco v1.0 Features

    * Uniquely identify source IPs on the network
    * Toggle discovery of only TCP SYN packets and fingerprint
    * Ability to toggle fingerprinting on/off
    * Output data to a flat text file
    * Define TCPDUMP style rules to filter on a subset or range of IPs
    * Able to turn "uniqueness" off when fingerprinting for
      fingerprinting all TCP SYN packets

    * Future plans to output data automatically to Gherkin scan manager
      database for vuln scanning (not released in v1.0)

See http://www.altmode.com/disco for download.

Thanks,
Preston

Next message: contactat_private: "Paros v2.1 for web application security assessment"
Previous message: Javier Fernandez-Sanguino: "Tiger security tool 3.x branch release"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu May 01 2003 - 11:58:33 PDT