Skip to Content.
Sympa Menu

internetworkers - Re: [internetworkers] how can I id a user?

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: david cherryholmes <david.cherryholmes AT gmail.com>
  • To: Brian Godfrey <bjgodfrey AT gmail.com>, "Internetworkers: http://www.ibiblio.org/internetworkers/" <internetworkers AT lists.ibiblio.org>
  • Subject: Re: [internetworkers] how can I id a user?
  • Date: Thu, 21 Jul 2005 19:30:51 -0400

This may be dumb, but here's an idea: you could grep the logfiles for
IP addresses, dump those to a file using bash/perl/awk/whatever, then
feed that file as input to nmap, and have it scan the boxen as a cron
job (or whatever). I suppose the feasibility of that depends on what
kind of outbound rules you have set on your firewall, and whether
there's NAT going on with the targets,but it seems doable to me. If
you fed nmap the right options, you might even make it so soft-touch
and passive that it wouldn't even be illegal (but I'd do my homework).


--

David Cherryholmes

posting as his very own self




Archive powered by MHonArc 2.6.24.

Top of Page