Understanding passive and active service discovery
Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Design of hybrid network discovery module for detecting client applications and ActiveX controls
ICCSA'07 Proceedings of the 2007 international conference on Computational science and Its applications - Volume Part II
Nfsight: netflow-based network awareness tool
LISA'10 Proceedings of the 24th international conference on Large installation system administration
Hi-index | 0.00 |
Passive network mapping has often been proposed as an approach to maintain up-to-date information on networks between active scans. This paper presents a comparison of active and passive mapping on an operational network. On this network, active and passive tools found largely disjoint sets of services and the passive system took weeks to discover the last 15% of active services. Active and passive mapping tools provided different, not complimentary information. Deploying passive mapping on an enterprise network does not reduce the need for timely active scans due to non-overlapping coverage and potentially long discovery times.