Distinguishing Linux machines on the network?

[blulwe]

Hi everyone, <br><br>I started to work on a project that deals with recognizing Linux machines on a network, <br>but besides getting and parsing the telnet banner [albeit quite lame] currently I am out of other ideas how to achieve my goal. Could someone provide me with any other thoughts?&nbsp;&nbsp;<br><br>Thanks, <br>Naiden<br> <p>Naiden<br><a href=mailto:naiden@beer.com>naiden@beer.com</a><br><a href=

http://www.stalker.org/~blulwe>http://www.stalker.org/~blulwe</a><br>

 

[smccrory]

This might not be as lame as you think &nbsp;&nbsp;If you write a Perl program, you could scan through a range of IP addresses, connect to the telnet port, capture the banner, parse it, store it, take it out to dinner, then disconnect and move on to the next host pretty quickly.&nbsp;&nbsp;If you'd rather do this on a Windows box, you could do it with VB and the Distinct/IP toolkit (as well as many others).<br>&nbsp;&nbsp;&nbsp;Scott<br><br>P.S. Leave out the dinner part if you need.

 

[fenris]

Why not use a program called nmap (<A HREF="

http://www.insecure.org/"

TARGET="_new">

http://www.insecure.org/</A>).

It has the ability to scan a network and Identify the operating systems on the network. It also does the port scanning and a number of other types of scans.<br><br>Hope this helps <p> fenris<br><a href=mailto:fenris@hotmail.com>fenris@hotmail.com</a><br><a href= > </a><br>

 

[blulwe]

Thanksto both of you. <br><br>smccrory, we already have this perl script that scans a pool of IP addresses but the problem with this method is that one can do the following: <br>-- change the telnet banner so that it says something like: &quot;Wellcome to Vulzevil&quot;<br><br>-- one can close the telnet port. <br><br>I haven't tried using nmap and there might be some issues with the security people in my company but I will have a look at how nmap get info what the OS of the peer is. <br> <p>Naiden<br><a href=mailto:naiden@beer.com>naiden@beer.com</a><br><a href=

http://www.stalker.org/~blulwe>http://www.stalker.org/~blulwe</a><br>