Thread: network security tools/suite

i'm working on security tool linux scan vulnerabilities in network. instead of trying fix problems, work warning system , send me email if detects apr attacks, dos attacks or duplicate mac addresses. id glad pack deb , open source after finish im stuck on detecting duplicate macs/mac spoofing. thinking of using nmap scan hosts , make script compare results nmap gives many details makes comparing things pain in backside do. know how cleaner output nmap or network scaner cleaner output.

posted z3nhakr

i'm working on security tool linux scan vulnerabilities in network. instead of trying fix problems, work warning system , send me email if detects apr attacks, dos attacks or duplicate mac addresses. id glad pack deb , open source after finish im stuck on detecting duplicate macs/mac spoofing. thinking of using nmap scan hosts , make script compare results nmap gives many details makes comparing things pain in backside do. know how cleaner output nmap or network scaner cleaner output.

nmap has ton of options explore. particularly suggest ping scanning this, or can full scan output file grepable format , grep through it.

example command might

code:

nmap -sp -og filename 192.168.0.0/24

then

code:

cat filename | grep "[0-9]*:[0-9]*:[0-9*]:[0-9]*:[0-9]*:[0-9]*"

or whatever options wanted throw on there -a handy nmap's output.

have these types of tools already, they're called ids. check out snort or suricatta. hope helps

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] network security tools/suite

Ubuntu