Re: Question Regarding Scans
Dathi Oxencroft <[email protected]>
| Newsgroups | gmane.network.irc.bopm |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Yes that's correct. bopm tried to talk to the listed ip/port and got nothing. This is what you expect from a closed connection (ie, not a proxy) and that's what bopm tries to do on every ip and every port you specify. If you have other proxies getting on your network, they are most likely not blacklisted and using an uncommon port that you are not testing. I'm sure you can appreciate bopm only tests the common proxy ports. To test every known port used by proxies (numbering well into the hundreds) is quite simply impractical. You can of course add any port to bopm to test as you so desire. Just add it to the scanner block in your conf. A weekly report is generated about the most common ports etc, and distributed via the opm-talk list http://lists.blitzed.org/listinfo/opm-talk Cheers On Sat, 4 Jun 2005 01:52 pm, mmorris6m wrote: > OK, I'm relatively new to BOPM, but I have successfully gotten it set up > and linked into my network. > > My question is this: > > In debug mode ( -dd ), when it says something like "SCAN -> Negotiation > timed out some.IP.here (protocol) [default] (0 bytes read)" does that mean > that the scan was successful, but no proxy was found?? I have seen several > proxies that get on my network that aren't blacklisted, but the scanner > doesn't detect them. > > Basically, I have no idea whether that message means the scan failed or if > it means that the scan was successful and nothing was found. > > If that message means that something is wrong, what is the message that > means it was successful?? > > Thanks in advance. - -- o---------------- Dathi E Oxencroft ----- Australia ----------------:)         MCSA, MCP, CompTIA A+ Network+ Linux+  If one learns from others but does not think, one will be bewildered  If one thinks but does not learn from others, one will be in peril                               -Confucius o--------- PGP key - http://www.appello.net/0x812A4FBB.txt ---------.) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCojJrqoduTYEqT7sRAjcfAJwLPFBS6lAPV4Ynvsp4LvQf2Gi+gwCcCC75 wDu//U4jSIWde3wL7DExe9E= =ebxK -----END PGP SIGNATURE-----