Re: snmp-ios-config script argument problem

Daniel Miller <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CABmvJnPpJSSX_o1+TUoRPMxSbNaBVXZaqyh-hw7ho_WfuGbUmA@mail.gmail.com>
Sorry for the delay in getting this message through to the mailing list.
You reported this separately on Github [1], and I believe we satisfactorily
resolved it there:

1. Corrected examples in NSEdoc to reflect the creds.snmp script-arg in use
for several versions now.
2. Improved snmp.lua's retrieval of credentials to understand strings
provided without a ":" separator.

Dan

[1] https://github.com/nmap/nmap/issues/862

On Thu, Apr 20, 2017 at 9:56 PM, Michael Hubbard <
[email protected]> wrote:

> I have a question about the snmp-ios-config script.
>
> I have been using it for a couple years with great success but I ran it
> today and it failed to pull the configuration.
>
> I ran wireshark and noticed that even though I defined:
> --script-args snmpcommunity=private
> it passed public as the string.
>
> I tried typing the script from scratch and going back to some notes I had
> on using the script but I was unsuccessful. If I set the switch up with a
> RW community of public it works.
>
> I started up a virtual machine that had Nmap 6.47 installed and the script
> worked perfectly.
>
> i tried the script on Ubuntu and Windows 7.
>
> Is there something I have to do in nmap 7.40 to pass the argument?
>
> If not can you point me in the right direction to troubleshoot?
>
> Thanks!
>
> Here is my command line.
>
> mhubbard@1S1K-SYS76:~$ sudo nmap -v -n -sU -p 161 --script
> snmp-ios-config --script-args snmpcommunity=private 192.168.10.51
>
> Starting Nmap 7.40 ( https://nmap.org ) at 2017-04-16 16:04 PDT
> NSE: Loaded 1 scripts for scanning.
> NSE: Script Pre-scanning.
> Initiating NSE at 16:04
> Completed NSE at 16:04, 0.00s elapsed
> Initiating ARP Ping Scan at 16:04
> Scanning 192.168.10.51 [1 port]
> Completed ARP Ping Scan at 16:04, 0.03s elapsed (1 total hosts)
> Initiating UDP Scan at 16:04
> Scanning 192.168.10.51 [1 port]
> Discovered open port 161/udp on 192.168.10.51
> Completed UDP Scan at 16:04, 0.04s elapsed (1 total ports)
> NSE: Script scanning 192.168.10.51.
> Initiating NSE at 16:04
> Completed NSE at 16:04, 5.00s elapsed
> Nmap scan report for 192.168.10.51
> Host is up (0.0036s latency).
> PORT    STATE SERVICE
> 161/udp open  snmp
> MAC Address: 64:00:F1:01:6F:C1 (Cisco Systems)
>
> NSE: Script Post-scanning.
> Initiating NSE at 16:04
> Completed NSE at 16:04, 0.00s elapsed
> Read data files from: /usr/local/bin/../share/nmap
> Nmap done: 1 IP address (1 host up) scanned in 5.41 seconds
>            Raw packets sent: 2 (116B) | Rcvd: 2 (158B)
> mhubbard@1S1K-SYS76:~$
>
> --
>
> http://mwhubbard.blogspot.com
>
> Twitter: @rikosintie
>
> https://www.linkedin.com/in/mwhubbard
>
> Minilock Public Key
>
> 22LXKQertj4op8vCjpWNmGJyaGPryp3BEFv8d2y4rTzG4Q
>
>
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
>

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.