Network Tools

[Solaris17]

yes!

[Kreij]

Whoops. Paper Size is broke. Will be fixed in next iteration.

[FordGT90Concept]

Beta 9 uploaded with some changes Kreij made.

[Kreij]

Originally Posted by Solaris17

yes!

Sol, my friend, your enthusiasm is much appreciated.

Now as soon as Ford finishes up the code for querying non-Windows computers and other network devices (eg. switches, routers, etc) using SNMP to get device types, names and status using their OID references, we ....

Oh wait. I didn't tell Ford about that idea yet.

... and remember all our faithful beta testers, run the software through the wringer. We can't fix it if we aren't aware it's broken.

[lemonadesoda]

Yes, the list of devices that exist but dont return a Windows query should be tested in other ways

It would be nice for the printers, linux servers, and routers/APs to announce themselves even in the most basic way.

[Kreij]

I was looking into it and it is quite possible that it could slow down the final results of intranet scan considerably, so I am not sure it would be something Ford would like to persue.

But hey, I'm willing to help with anything. Until someone come up with a new project that's more interesting.

[FordGT90Concept]

Originally Posted by Kreij

Now as soon as Ford finishes up the code for querying non-Windows computers and other network devices (eg. switches, routers, etc) using SNMP to get device types, names and status using their OID references, we ....

Oh wait. I didn't tell Ford about that idea yet.

... and remember all our faithful beta testers, run the software through the wringer. We can't fix it if we aren't aware it's broken.

That looks like a fairly large can of worms. I could always add it and default it to false (GetSNMP...). The infrastructure (multithreading, GUI elements, etc.) are already there. It is just a matter of coding the protocol. I think I would hit major roadblocks with IPv6 though.

[Kreij]

It's up to you Ford, you're the network code guru.

@Lemon : Did you try any A5 printing yet?

Any other features you guys want us to consider?

[FordGT90Concept]

I'm not finding much information on SNMP so it is pretty unlikely I'll add it.

[lemonadesoda]

I'll post screenies of programs that are able to pull out more than just Windows machines... up to you if you want to investigate



"SECURE" is a linkstation NAS (linux based)
QMS-SCANNER is an HP 9200c network scanner
WAG102 is a netgear wireless AP

The software is fast. But it isnt perfect (LOL). It isnt picking up the Xerox or Kyocera printers, not the OTHER access point, a WG302, or the webcam.

[Kreij]

Well, since no one has come back with any problems with the printing portion of Beta 9, and I don't know what Ford's working on at the moment, I guess I just start some custom user controls for NetTool 3 alpha 1 (I like writing custom user controls)

@Ford. I wrote an SNMP class and stub program that will query devices by IP address and pull the MIB information, but it is sketchy at best and is wholy dependant upon the device being SNMP enabled. I was using the top level SNMP MIB requests info (like 1.3.6.1.2.1.1.5.0 (sysName) ), but still got no response (timeout = 5sec) from most of my network devices. I did not try digging deeper into vendor specific MIB database structures. Actually the only device that responded was an HP network printer. I'll fiddle with it more later, if for nothing more than my own curiosity.

[FordGT90Concept]

Well, WMI is very much the same way.


@lemonadesoda: The only thing that does that we aren't is getting a list of shared directories on the machine. I can't see that really being useful though.

[Kreij]

Yeah, but he is also getting host names for other devices (scanner, AP, etc.)
That's what I was trying to get on my network. I don't really need any more than the name and maybe what it is, but that is a little elusive at the moment.

[lemonadesoda]

Dont worry about shared directories. But what IS important, is getting a scan to identify the device names so that we have a proper map. Just a list of DHCP assigned IP responses is worthless IMO.

It's an important element to crack. Sorry I cant help more than just show you examples of other software that have got it working (to some extent).

[Kreij]

It's not just doing DHCP assign resources. All of my devices have static IPs and I do not run DHCP on my networks. That being said, I agree with you that we should be able to come up with something to detect non-windows network devices.

[FordGT90Concept]

There are a lot on that list that are unnamed as well. It all depends on the device and if/how it responds to host name requests. Everything we're talking about (WMI, SNMP) go beyond the norm and attempt to extract very specific information from the machine. If the machine isn't responding to the simpiliest of DNS requests, there's a very good chance it won't respond to anything else.

By the way, the only device it doesn't have a name for on my network is the router itself. Both my Brother printers have their name. At the same time, the have a printer node name defined and are configured to operate via node name.

[lemonadesoda]

Angry IP scan is also finding all the devices. Note that the scan doesnt look as complete as softperfect's due to the fact i'm running this from wireless laptop... which doesnt jump a network bridge to the production room (soit cant see the scanners and printers)



Oh, very nice. Fast. I told it what ports to scan... and it is showing me what is open. 21 FTP, 80 HTTP, 443 HTTPS, 9100 for printers.
The web detect is useful... a smart scanner could then "read" a default web page and extract the "title"? Perhaps also on 9100? I know nothing about how port communication works... but can you query them and get useful info back?

Here is a printout from the router, for comparison:


LOOK! Here's the sourcecode to Angry IP: http://www.angryip.org/w/Development Maybe that will help

[FordGT90Concept]

What names does Net Tools 2 get compared to SoftPerfect Network Scanner? Angry IP doesn't look to be pulling any more information than Net Tools already does (except ports, see below).


I think it is bad practice to port scan multiple IPs like that. Network monitoring apps may flag the computer running the scan as a potential attack source.

[Kreij]

For me (on my home network) NetTool2 gets the same hostnames as SoftPerfect (ie. it finds my NAS device). Neither find my linksys router.

I will try both SP at work tomorrow. I am not really intersted in all the additional details. I like the fact that NetTool is fast and consice. I can get other scanners that scan the network for ages trying to find information (like SpiceWorks), but I don't need all of that information.

I do, however, think that we need a GUI that is more purdy.

[lemonadesoda]

Originally Posted by FordGT90Concept

I think it is bad practice to port scan multiple IPs like that. Network monitoring apps may flag the computer running the scan as a potential attack source.

I disagree. I'm doing a LAN audit, and I selected through options a set of ports I wanted scanning. Now I have a (fullish) picture of what's on my LAN. IMO this is exactly what a scanner needs to be capable of doing, when necessary.

PS. Nettool is still brilliant, even if I have now found 2 alternative lan scanners

[lemonadesoda]

I have just re-run Softperfect with some extra options. Nice. I see that there are additional names coming through SNMP.I'll run it on the main office LAN tommorow.

[lemonadesoda]

Not much new when scanning from a wired LAN other than reaching over the bridge:



Suggestions:

1./ If live, but "hostname" is blank, then do SNMP to show some useful ID
2./ If live, but "hostname" and SNMP is blank, and port 80 is live, then read the html title to get some useful ID

[FordGT90Concept]

Intranet Scan won't prode ports. SNMP is not planned.