Re: lightweight scan strategy - libnet?

Sure, libnet with libpcap is what you want. You can cannibalize the 
code from the sample files, or if you want to be an early adopter, I'll 
be releasing hummingbird soon (super fast asynchronous scanning 
framework) and it already has  everything you need. The ICMP_ECHO 
module will ping hundreds of thousands of hosts if you need it to, and 
do it faster than anything else out there today and the TCP_PORT module 
will do the TCP port scanning to port 139...

On Feb 9, 2005, at 12:03 PM, David Wuertele wrote:

> I've got an embedded system on which I want to host a very lightweight
> and fast SMB scanner.  This scanner will need to ping a large number
> (hundreds, potentially thousands) of IP addresses, and for each host
> that replies it will try connecting to port 139, just to see if it is
> open.  That's all this program has to do.
>
> If I want to maximize speed and simplicity, do you think that libnet
> is the right way to inject packets?  It doesn't appear that libnet has
> a facility for getting replies --- is there a more suitable library
> that does?
>
> Thanks,
> Dave
>
>
--
Mike Schiffman, CISSP
http://www.packetfactory.net/schiffman
Doveryay No Proveryay