[c-nsp] CDP agent for hosts

[Rubens Kuhl Jr.]

Hosts that are in promiscuous mode, like the Network Vantage probes,
won't be found as easily as general servers/workstations, for which
doing
1) broadcast ping
2) show arp
3) show mac-address-table

would generate a good map. Specially in some switch models that don't
accept packets in ports that are destination of a "monitor session"
traffic capture.

But... I've never tested running CDP on such a switch to see if it can
establish a CDP session.


Rubens


On 6/18/07, ChrisSerafin <chris at chrisserafin.com> wrote:
> Excuse my ignorance, but why would you want to use CDP on
> servers/workstations?
>
> Chris Serafin
> Security Engineer
> chris at chrisserafin.com
>
>
>
> Ian Henderson wrote:
> > Dale Shaw wrote:
> >
> >
> >> I'm looking for recommendations for a third party CDP agent for
> >> Windows. We have deployed Compuware network probes on PC hardware
> >> running Windows XP and I'd like to run a CDP agent on them. There are
> >> a number of options out there and I figure some of you may have some
> >> good (or bad) tales to tell.
> >>
> >
> > Google provides http://www.tallsoft.com/cdpmonitor.htm. Just quickly
> > installed it on my XP Thinkpad and it works, downside seems to be that
> > it's a bit bloated (client as well as server) and its nagware.
> >
> > -----
> > Device ID: BOUNCER(ianh)
> > Entry address(es):
> >   IP address: x.x.x.x
> > Platform: CPU:1*586; MEM:510M,  Capabilities: Host
> > Interface: FastEthernet0/0,  Port ID (outgoing port): Intel(R)
> > PRO/Wireless 2200BG
> > Holdtime : 28 sec
> >
> > Version :
> > windows XP  build 2600  Service Pack 2
> > DISK INFORMATION:
> > C:\ : Fixed Disk
> > D:\ : CDROM Disk
> >
> > advertisement version: 2
> > -----
> >
> > The output is pretty similar to the CallManager/Communicator CDP from
> > Cisco:
> >
> > -----
> > Device ID: SEP00123Fxxxxxx
> > Entry address(es):
> >   IP address: 10.x.x.x
> > Platform: Communicator (Windows XP),  Capabilities: Host Phone
> > Interface: FastEthernet0/21,  Port ID (outgoing port): Broadcom
> > NetXtreme 57xx Gigab
> > Holdtime : 130 sec
> >
> > Version :
> > 1, 0, 0, 1
> >
> > advertisement version: 1
> > Management address(es):
> > -----
> >
> > We also have one for Linux as part of our base install, don't have a URL
> > handy though sorry.
> >
> > Rgds,
> >
> >
> >
> > - I.
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> >
> >
> >
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>