New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

shard dupes #262

Open
freeload101 opened this Issue Dec 7, 2016 · 0 comments

Comments

Projects
None yet
1 participant
@freeload101

freeload101 commented Dec 7, 2016

  • --shard show dupes with 172
  • each scanner works fine with out --shard with one host / port
  • seems to be random what files have dupes this instances its shard 2 and shard 8
  • I am doing whole 10. with these ports on corporate network from one scanner but I can't seem to use shard or --resume-index/--resume-count not even sure how it works ...
  • I may end up just using masscan -sL 10.0.0.0/8 > tmp ;split -l 1864136 tmp ...

dupe for port 22 on 172.30.206.130
grep 22 *.xml | grep 172.30.206.130 10_2_shard.xml:<host endtime="1481075753"><address addr="172.30.206.130" addrtype="ipv4"/><ports><port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="58"/></port></ports></host> 10_8_shard.xml:<host endtime="1481077483"><address addr="172.30.206.130" addrtype="ipv4"/><ports><port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="58"/></port></ports></host>

Command I run BLACKLIST only has 10. addresses in it so its not the blacklist

`
masscan --shard 1/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_1_shard.xml
masscan --shard 2/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_2_shard.xml
masscan --shard 3/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_3_shard.xml
masscan --shard 4/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_4_shard.xml
masscan --shard 5/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_5_shard.xml
masscan --shard 6/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_6_shard.xml
masscan --shard 7/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_7_shard.xml
masscan --shard 8/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_8_shard.xml
masscan --shard 9/9 -p21,22,23,25,53,80,88,110,111,113,135,139,143,220,264,389,443,445,449,524,585,636,993,995,1433,1521,1723,3306,3389,5900,8080 --rate=14114 --open --excludefile BLACKLIST --ping 172.16.0.0/12 -oX 10_9_shard.xml

`

more info

`
uname -a
Linux enterprise 3.13.0-35-generic #62precise1-Ubuntu SMP Mon Aug 18 14:52:04 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
root@enterprise:
/MASS# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04
DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION="Ubuntu 12.04.5 LTS"
root@enterprise:~/MASS# masscan -V

Masscan version 1.0.3 ( https://github.com/robertdavidgraham/masscan )
Compiled on: Dec 6 2016 15:19:16
Compiler: gcc 4.6.3
OS: Linux
CPU: unknown (64 bits)
GIT version: 1.0.3-120-gdc88677

`

`
9 10,172,179,50,139
9 10,172,74,49,139
9 10,173,17,50,139
9 10,201,154,50,139
9 10,201,49,50,139
9 10,202,88,50,139
9 10,50,19,50,139
9 10,50,68,49,139
9 10,51,145,50,139
9 10,51,58,50,139
10 10,101,29,50,139
10 10,173,16,50,139
10 10,51,53,50,139
12 10,135,32,50,139
13 10,132,60,50,139
13 10,201,96,50,139
14 10,170,44,50,139
14 10,202,120,50,139
16 10,171,6,50,139
21 10,202,22,50,139

`

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment