Two questions about SNMP strings in the Engineer's Toolset please.
1. Where is the string list in the SNMP Sweep tool stored?
2. Is there any way to choose which strings in the list will be used with the SNMP Sweep tool in a scan?
I can't reveal specific methodologies for discovery on the forum, but it is always advisable to place the most common credential higher in the list for the fastest possible scan.
HTH,
Greg
#1 - In the registry: HKey_Current_User\Software\VB and VBA Program settings\SNMPSweep\Community Strings.
#2 - We will try all the community strings in the list until one works.
Thanks Greg, but that brings to mind one other question.
Does the Sonar Discovery tool operate in the same way? In other words, if I set the tool to scan a subnet using a list of three strings, does Sonar scan the entire subnet with each string, or does it scan address by address moving along when it discovers a string that works with each responding node?
Thanks.
No problem Patriot, but this brings up a question for you: What are you looking to do, speed up the scan? Or not reveal a community string?
As long as we discover the hosts with a working community string, I am not sure the difference in methodology is important, unless I am missing something...
--Greg
Looking to speed up the scan. So, if the first string in the list is the most prevalent on the network, the scan will proceed faster, right? So, I suppose the answer is that Sonar hits each device or IP with the list of strings until one clicks, or until the list is exhausted, whichever comes first. Then it moves on to the next one until the scan is finished.
Correct?