braa [-2] [-v] [-t <s>] [-f <file>] [-a
<time>] [-r <retries>] [-d <delay>] [querylist1]
[querylist2] ...
Braa is a mass snmp scanner. The intended usage of such a tool is
of course making SNMP queries - but unlike snmpget or snmpwalk from
net-snmp, it is able to query dozens or hundreds of hosts simultaneously,
and in a single process. Thus, it consumes very few system resources and
does the scanning VERY fast.
Braa implements its OWN snmp stack, so it does NOT need any SNMP libraries
like net-snmp. The implementation is very dirty, supports only several data
types, and in any case cannot be stated 'standard-conforming'! It was
designed to be fast, and it is fast. For this reason (well, and also because
of my laziness ;), there is no ASN.1 parser in braa - you HAVE to know the
numerical values of OID's (for instance .1.3.6.1.2.1.1.5.0 instead of
system.sysName.0).
- -h
- Show help.
- -2
- Claim to be a SNMP2C agent.
- -v
- Show short summary after doing all queries.
- -x
- Hexdump octet-strings
- -t <s>
- Wait <s> seconds for responses.
- -d <s>
- Wait <s> microseconds after sending each packet.
- -p <s>
- Wait <s> milliseconds between subsequent passes.
- -f <file>
- Load queries from file <file> (one by line).
- -a <time>
- Quit after <time> seconds, independent on what happens.
- -r <rc>
- Retry count (default: 3).
- $braa public@10.253.101.1:161:.1.3.6.*
- Walk the SNMP tree of host 10.253.101.1 with public string querying all
OIDs under .1.3.6:
- $braa 10.253.101.1-10.253.101.254:.1.3.6.1.2.1.1.6.0
- Query the whole subnet 10.53.101/24 of for system.sysLocation.0
- $braa private@10.253.101.1:.1.3.6.1.2.1.1.6.0=sMy network
- Tries to set the value of system.sysLocation.0 to "My network"
at host 10.253.101.1
- The only supported datatypes are: integer (gauge, counter, timeticks,
etc.) counter64, string, ipaddress, OID. Of course you are free to modify
braaasn.c/braaasn.h to support more types...
- braa will never send more than 1500 bytes (or a single packet) to a host
in a single try. Thus the number of queries that might be sent to a single
host is limited. Additionally, if you reach the limit by specifying too
many queries, braa will terminate the whole scanning process... I can't
tell what the limit exactly is, it just depends on many factors (mainly,
the length of OIDs), anyway, 15 queries per hosts sounds dangerous, and
better try not to exceed this number.
- It is impossible to specify FQDN hostnames - you always have to give IP
addresses of hosts... well, I think it'll be corrected in future versions,
if there will be ones.