biob Posted November 13, 2017 Share Posted November 13, 2017 Hi, Is there a tool to passively map a network from a packet capture and produce documentation e.g. network map, ports open on devices etc...? Quote Link to comment Share on other sites More sharing options...
0phoi5 Posted November 13, 2017 Share Posted November 13, 2017 5 hours ago, biob said: Hi, Is there a tool to passively map a network from a packet capture and produce documentation e.g. network map, ports open on devices etc...? nmap hoover.pl wireshark kismet aircrack-ng When you say you need to 'map' the network and produce documents, do you mean like a nice 'flowchart' type view? Quote Link to comment Share on other sites More sharing options...
biob Posted November 13, 2017 Author Share Posted November 13, 2017 More along the line of identifying hosts, DNS servers, printers etc.. in a graphical form. List of protocols used on the network. websites browsed too. Packets to be captured on the Packet Squirrel on my test environment. Quote Link to comment Share on other sites More sharing options...
0phoi5 Posted November 13, 2017 Share Posted November 13, 2017 Use nmap to capture. Then use https://www.dca.ufrn.br/~joaomedeiros/radialnet/ Quote Link to comment Share on other sites More sharing options...
0phoi5 Posted November 13, 2017 Share Posted November 13, 2017 Or https://nmap.org/soc/NmapDiag.html Quote Link to comment Share on other sites More sharing options...
biob Posted November 13, 2017 Author Share Posted November 13, 2017 Are we talking about a Nmap scan? Was hoping to be totally passive in collecting packets. I’ve used zenmap to produce nice graphical topology graphics before and it’s a nice little tool.Obviously I wouldn’t be able to produce a topology(L2) from a single pcap, but should be able to build a picture for L3. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.