Hi, I’ve been using routerOS since v 2.x (and LOVE IT), and have hundreds of mt s deployed, a feature I’m constantly in need of is even a bare-bones/basic built in port scanner:
/tool portscan (or /tool portScanner)
It doesn’t have to be powerful or advanced like nmap, nor fast, just a tool that can help admins identify/recall private IPs or other internal network uses ( ie, which ip is running the Web server on this office network? Or which ip is running the SQL Server on this network?) - this could be very helpful versus having to keep a Linux VM attached to a VPN, strictly for port scanning my internal networks when I can’t remember the private IP of a customers VNC server , and when I need to remote-in support their PC) - or which private subnet, DHCP-server provided ip (192.168..) is running XYZ service, so I can quickly set up this Dst-nat rule for them)
I’m not sure how tools like a built-in SMB server (or built in tftp/ftp server) made it into routerOS before a useful, network-centric tool like portscan ( but I’m happy to have both/all three).
Please strongly consider adding a basic (even if only TCP only, 1 port per second limit, if needed) port scan tool to ROS 7 ROS 6.X.
Not sure how theDude is relevant to this ( or thedude is just as relevant/irrelevant as manually running nmap outside ros ) , we are looking for a port scan utility to be added to routerOS, this way it is accessible directly from/on our various routerboards/rOSdevices directly.
Tks
Yes, this would be great to be able to identify what is a printer or a web server in a network.
Combined with a MAC-address vendor list (in winbox) to show the manufacturer of all devices.
while i know it is wrong to " bump" your own thread, but on a weekly basis ( weekly is a bare minimum, sometimes daily basis) i need a portscan tool on ros. Its ridiculous having to look up mac-address OIDs and/or use /sys telnet port=x as a rough port scan tool to ID devices.
Often when i come into a new , existing network to begin managing (or clean up / improve) there will be a managed switch somewhere on the network (but the prior admin either has not ID’d / noted it or it has grabbed a dhcp IP like the 100s of other random client devices , wo a readable dhcp client id. Ofcourse a ros built-in portscan tool would help in this scenario tremendously ( even slowed/restricted ps tool). But incase it helps others, here is a rough work around i use. ( you will need to change the mac addresses to which ever vendor’s device you are trying to locate, i usually grab the OIDs from a website like “Wireshark · OUI Lookup Tool” (google search) and type into that site the vendor (netgear / ruckus in this case). then use linux cli tools, or an app like notepad +++ (w regex find/replace) to modify this command to paste in the list of macs.
(also note, you may need to search /ip arp if you are not using ros bridges, or this may not work at all depending upon your network layout):
(find IPs of ruckus APs - i use /ip arp here just to show 2nd command option, /int bridge host print where , may work better depending upon your network layout ) :
(also it may help to run an /tool ip-scan of your entire subnet, before running these commands, if device you are trying to find has not pushed any traffic for awhile, and thus is not in the arp/hosts tables)
@dagelf
Originally I thought you just came with miracle, but it does not really work. Firstly, it would take huge amount of time as it does not work in parallel and you have to interrupt each connection which gets established, secondly, it actually crashed my winbox and produced autosupout.rif … Not really sure what happened in there and i was unable to replicate it.
