netstat scanner

[Michel Arboi]

Those who are running the CVS version of Nessus should be able to test
netstat_portscan.nasl

This plugin uses netstat to get the list of open ports. Either by
connecting on the netstat port (15) or by using SSH.

- this is quicker than anything else, even snmpwalk
- this is the lest dangerous scanner:
  - TCP scanners (e.g. nmap -sT) may crash broken services, 
  - nmap -sN or -sX may crash broken IP stacks,
  - SYN scanners (nmap -sS) may overload the machine? and may crash
    broken IP stacks? 
  - snmpwalk crashes buggy versions of IBM HACMP cluster.
- but just like snmpwalk, it may report open ports that are protected
  by an IP filter.

-- 
arboi at alussinan.org	http://arboi.da.ru
FAQNOPI de fr.comp.securite http://faqnopi.da.ru/
NASL2 reference manual http://michel.arboi.free.fr/nasl2ref/