主机扫描(国外英文资料).docVIP

主机扫描(国外英文资料) Host scanning principle and the ICMP protocol shallow solution (2009-08-08 13:17) Classification: network security 1 teasers Heres a concept: what is a host scan? A host scan is the name of the host that is present in the scan network. So how do you scan a specific host? The answer is to determine by sending an ICMP protocol package. So what is an ICMP package? I cant make a right, for example, ICMP packet is just like the post office delivery, do you want to scan the existence of a host and to the host address (IP) to send a Courier, delivery success or not, the post office will notify you. Then you know if the network address exists. What do I need to do to get the message from the post office? So were going to analyze the delivery of the ICMP package. Im not going to say much about the structure of the structure, but theres a lot of information on the Internet that you can look up The ICMP data structure in Linux ( netinet/ip_icmp.h ) is defined as follows: Struct icmp { U_int8_t icmp_type; / * type of message, see below * / U_int8_t icmp_code; / * type sub code * / U_int16_t icmp_cksum; / the ones complement the checksum of struct / The union { U_char ih_pptr; / * ICMP_PARAMPROB * / Struct in_addr ih_gwaddr; / * gateway address * / Struct ih_idseq / * echo datagram / { U_int16_t icd_id; U_int16_t icd_seq; } ih_idseq; U_int32_t ih_void; / * ICMP_UNREACH_NEEDFRAG -- Path MTU Discovery (RFC1191) * / Struct ih_pmtu { U_int16_t ipm_void; U_int16_t ipm_nextmtu; } ih_pmtu; Struct ih_rtradv { U_int8_t irt_num_addrs; U_int8_t irt_wpa; U_int16_t irt_lifetime; } ih_rtradv; } icmp_hun; Define icmp_pptr # define icmp_gwad_gwad_gwaddr Pound sign define icmp_idse.icd_id Define icmp_seq # define icmp_void icmp_hun. Ih_void Define icmp_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_p_ Define icmp_nextmtu Pound sign define icmp_num_addrs. Irt_num_addrs Pound sign define icmp_wpa Define icmp_lifetime The union { struct { U_int32_t its_otime; U_int32_t its_rtime; U_