Learn, hack!

URL

http://events.ccc.de/congress/2007/Fahrplan/attachments/1059_24c3PortBunnySlides.pdf

File name

1059_24c3PortBunnySlides.pdf

File size

4.7 MB

MD5

d9fabadfd1cda4ae027ddfaf7eccdad4

SHA1

072f3b7e876d04a9fe4bd22450d77983e3bba7d7

Port-Scanning large networks can take ages. Asking yourself how much of this time is really necessary and how much you can blame on the port-scanner, you may find yourself integrating your own scanner into the linux-kernel. Or at least we did. How fast a port-scan can be is largely dependent on the performance of the network in question. Nonetheless, it is clear that choosing the most efficient scanning-speed is only possible based on sufficient information on the network's performance. We have thus designed and implemented a port-scanning method which provokes extra network-activity to increase the amount of information at our disposal in an attempt to gain speed on the long run. Further tweaking the actual implementation by integrating it into the linux-kernel left us with a port-scanner ready to tackle big networks at an impressive speed. The presentation will also include thoughts and motivations why we decided to work on topics that are largely considered "done" by the community and why such considerations may be interesting to other researchers.