The result is reliable : next run must return the same result ( obviously if the services and network stay alive ).This is the most efficient way, both max speed and min network bandwidth.You have to know what services you are probing. For example CDP, SSDP, srvloc, snmp get broadcast, etc. If your goal is to map your network, the official services, you can think about their official discovery capabilites. Some IDS can log this activity as bad one.Sometimes you must have a admin account on your pc to run this scanning.The results aren't a simple i_got_it / null, but fuzzy : you need an expert to evaluate the results.The next run can lead to quite a different result. The results aren't 100 % affordable : hw or sw firewalls etc.If you start from scratch - you know nothing about the LAN - and you want to find every possible service, you have to scan almost all the tcp and udp ports for every possible host. For newbies, it sounds the best way : start from scratch, find them all.
Can be a useful tool to discover services and security audit.forgotten by lazy sysadmins or installed by untrusted users. Can discover unknown devices and services.There is many ways to accomplish this, for example : The ideas can be tips also for other scenarios. First, this answer is biased on ethernet networks.
0 kommentar(er)
