Carlton Foster <[EMAIL PROTECTED]> writes:
> How can I scan our entire address space without causing all of the
> network attached printers to spew paper?
IMHO, a clean way would be to write an ACT_SCANNER plugin that would
recognize the printer and declare them "dead" before ACT_GATHER_INFO
plugins start sending them data.
Can you provide more information on the printers? e.g.
nmap -sS -sU -p 1-65553 host
And any banner seen on the open ports.
And also, just in case the printers use AppSocket:
echo -e '\r\n' | nc -u host 9101 | od -xc
> Is there just one plugin I can turn off, or is there a group?
The problem is with the dumb AppSocket or SocketAPI protocols.
Anything that is sent to the port is printed.
--
[EMAIL PROTECTED] http://arboi.da.ru
FAQNOPI de fr.comp.securite http://faqnopi.da.ru/
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus