| 关键词: hrSWRunTable hrSWRunEntry Variable hrSWRunName String hrSWRun Value host exe System |
作者: Net2k 来自:流星轨迹 对中国先锋网络科技基于SNMP的信息刺探 得到系统正在运行的程序信息:------------------------------------------------------------Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1Value = String System Idle Process Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.8Value = String System Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.172Value = String smss.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.196Value = String winlogon.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.200Value = String csrss.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.248Value = String services.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.260Value = String lsass.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.296Value = String wuauclt.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.456Value = String svchost.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.496Value = String spoolsv.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.524Value = String msdtc.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.656Value = String DefWatch.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.676Value = String tcpsvcs.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.692Value = String svchost.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.720Value = String llssrv.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.764Value = String Rtvscan.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.872Value = String hlds.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.924Value = String nvsvc32.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.992Value = String Explorer.EXE Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1000Value = String regsvc.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1032Value = String MSTask.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1072Value = String snmp.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1092Value = String ServUDaemon.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1104Value = String SMAgent.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1140Value = String WinMgmt.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1164Value = String wins.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1176Value = String svchost.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1196Value = String xconfserver_t.e Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1228Value = String Dfssvc.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1248Value = String inetinfo.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1348Value = String dns.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1568Value = String vptray.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1580Value = String internat.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1844Value = String dllhost.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.1952Value = String dllhost.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2060Value = String mdm.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2144Value = String conime.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2216Value = String hlds.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2336Value = String hlds.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2348Value = String svchost.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2424Value = String hlds.exe Variable = host.hrSWRun.hrSWRunTable.hrSWRunEntry.hrSWRunName.2460Value = String hlds.exe End of MIB subtree.------------------------------------------------------------ 得到系统信息:------------------------------------------------------------Variable = system.sysDescr.0Value = String Hardware: x86 Family 15 Model 2 Stepping 9 AT/AT COMPATIBLE -Software: Windows 2000 Version 5.0 (Build 2195 Multiprocessor Free) Variable = system.sysObjectID.0Value = ObjectID 1.3.6.1.4.1.311.1.1.3.1.2 Variable = system.sysUpTime.0Value = TimeTicks 24725698 Variable = system.sysContact.0Value = String Variable = system.sysName.0Value = String XIAOTOU Variable = system.sysLocation.0Value = String Variable = system.sysServices.0Value = Integer32 76 End of MIB subtree.------------------------------------------------------------ ------------------------------------------------------------关于snmputil的语法:------------------------------------------------------------get,就理解成获取一个信息。 getnext,就理解成获取下一个信息。 walk,就理解成获取一堆信息(嗯,应该说所有数据库子树/子目录的信息) agent,具体某台机器拉。 community,嗯就是那个“community strings”“查询密码”拉。 oid,这个要多说一下,这个呢,就是物件识别代码(Object Identifier)。............................................................ 例:snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.4.2.1.2 //**进程列表snmputil.exe walk 对方IP public .1.3.6.1.4.77.1.2.25.1.1 //**用户列表snmputil.exe get 对方IP public .1.3.6.1.4.77.1.4.1.0 //**域名snmputil.exe walk 对方IP public .1.3.6.1.2.1.25.6.3.1.2 //**安装的软件snmputil.exe walk 对方IP public .1.3.6.1.2.1.1 //**系统信息 |
|
声明:文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|