On Mon, Apr 29, 2002 at 09:27:39PM +0200, Hugo van der Kooij wrote:
> On 29 Apr 2002, Michel Arboi wrote:
>
> > Ha Nguyen <[EMAIL PROTECTED]> writes:
> >
> > > What are the services that find_services.nes can detect (version 1.2.0) ?
> >
> > The answer is in the source code:
> > HTTP, Telnet, SMTP, Real server, FTP, SSH, IMAP, NNTP, Linuxconf,
> > "wild" shell (backdoor), Netbus, HTTP proxy, echo, chargen, SOCKS,
> > and (based upon a web server) SWAT, vqServer, ncan.
>
> According to some verified test nessus failed to identify the presence of
> telnet on several other ports on a Cisco router.
>
> Renaud: If you want to verify this I can ask the customer if you are
> allowed to see if you can reproduce the incident.
Actually, if you could just record a tcpdump session of you connecting
to the remote telnet server, I'd be interested
(tcpdump -i <iface> -s 1500 -w for_renaud.pcap "host <router> and port
<port>" )
-- Renaud
