Re: Network scan tool/appliance horror stories

2012-11-02 Thread Joakim Aronius
* Jones, Barry (bejo...@semprautilities.com) wrote: > I can share with you several stories personnel (both IT or vendors), who have > scanned Electric Utility environments with or without permission; and hence > caused multiple failures - including electro-mechanical systems and related > applic

RE: Network scan tool/appliance horror stories

2012-10-30 Thread Jones, Barry
- From: Chuck Church [mailto:chuckchu...@gmail.com] Sent: Tuesday, October 30, 2012 10:23 AM To: nanog@nanog.org Subject: RE: Network scan tool/appliance horror stories Network scan tools are a great way to verify what important protocols you left out of your control plane policing non-default

RE: Network scan tool/appliance horror stories

2012-10-30 Thread Chuck Church
Network scan tools are a great way to verify what important protocols you left out of your control plane policing non-default policies. Had a scanner totally clog up our 6500 core router DHCP relay (ip helper) function once. Uggghhh, security people Chuck

Re: Network scan tool/appliance horror stories

2012-10-30 Thread Dan Snyder
We have had ncircle scans unexpectedly crash alcatel-lucent omni-switches. On Mon, Oct 29, 2012 at 3:10 PM, Pedersen, Sean wrote: > We're evaluating several tools at the moment, and one vendor wants to > dynamically scan our network to pick up hosts - SNMP, port-scans, WMI, the > works. I was c

RE: Network scan tool/appliance horror stories

2012-10-30 Thread Jones, Barry
: Pedersen, Sean Cc: nanog@nanog.org Subject: Re: Network scan tool/appliance horror stories On 10/29/12 12:10 -0700, Pedersen, Sean wrote: >We're evaluating several tools at the moment, and one vendor wants to >dynamically scan our network to pick up hosts - SNMP, port-scans, WMI, >th

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Andreas Ott
On Mon, Oct 29, 2012 at 12:10:40PM -0700, Pedersen, Sean wrote: > We're evaluating several tools at the moment, and one vendor wants to > dynamically scan our network to pick up hosts - SNMP, port-scans, WMI, > the works. I was curious if anyone had any particularly gruesome horror > stories of sca

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Ryan Malayter
On Oct 29, 2012, at 3:55 PM, "Rutis, Cameron" > > 6) large stacks of 3750s (six or more members) have issues around CPU during > certain SNMP commands (I want to say some sort of getbulk type of command) > > The first four were pretty minor although #3 could generate a lot of calls to > the

Re: Network scan tool/appliance horror stories

2012-10-29 Thread nick hatch
On Mon, Oct 29, 2012 at 2:10 PM, Pedersen, Sean wrote: > I was curious if anyone had any particularly gruesome horror stories of > scanning tools run amok. > A particular model of ShoreTel voice switches I used to administer (running VxWorks, IIRC) would reliably lock up hard when hit with nmap'

RE: Network scan tool/appliance horror stories

2012-10-29 Thread Rutis, Cameron
been an old IOS bug. -Original Message- From: Pedersen, Sean [mailto:sean.peder...@usairways.com] Sent: Monday, October 29, 2012 12:11 PM To: nanog@nanog.org Subject: Network scan tool/appliance horror stories We're evaluating several tools at the moment, and one vendor wants to

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Dan White
On 10/29/12 12:10 -0700, Pedersen, Sean wrote: We're evaluating several tools at the moment, and one vendor wants to dynamically scan our network to pick up hosts - SNMP, port-scans, WMI, the works. I was curious if anyone had any particularly gruesome horror stories of scanning tools run amok.

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Jared Mauch
I heard a story in the past year of someone that had a system get scanned and it opened a ticket with their IT department for each time they scanned them. Eventually the IT department system crashed due to the excessive number of tickets being opened by their scanning tool. The network was pro

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Paul Thornton
On 29/10/2012 19:25, Justin M. Streiner wrote: Also, if you're doing IPv6, the performance metrics for many network devices can be a bit more of a moving target. I'd almost be tempted to set up a few machines doing v6 only on the LAN, with some trivial to exploit telnet/SNMP access then invi

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Bacon Zombie
It all depends on what tools they are using and how you have your system setup. Both NMAP and Nessus can check system\service to see if common accounts have default or non password at all. This can cause these accounts to be locked out. There are other "exploits" that can cause systems\services t

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Justin M. Streiner
On Mon, 29 Oct 2012, Pedersen, Sean wrote: We're evaluating several tools at the moment, and one vendor wants to dynamically scan our network to pick up hosts - SNMP, port-scans, WMI, the works. I was curious if anyone had any particularly gruesome horror stories of scanning tools run amok.

Network scan tool/appliance horror stories

2012-10-29 Thread Pedersen, Sean
We're evaluating several tools at the moment, and one vendor wants to dynamically scan our network to pick up hosts - SNMP, port-scans, WMI, the works. I was curious if anyone had any particularly gruesome horror stories of scanning tools run amok.