NAME

       braa - Mass SNMP scanner

SYNOPSIS

       braa  [-2]  [-v] [-t <s>] [-f <file>] [-a <time>] [-r <retries>] [-d <delay>] [querylist1]
       [querylist2] ...

DESCRIPTION

         Braa is a mass snmp scanner. The intended usage of such a tool is of course making  SNMP
       queries  -  but  unlike  snmpget  or snmpwalk from net-snmp, it is able to query dozens or
       hundreds of hosts simultaneously, and in a single process.  Thus,  it  consumes  very  few
       system resources and does the scanning VERY fast.
         Braa  implements  its  OWN  snmp stack, so it does NOT need any SNMP libraries like net-
       snmp. The implementation is very dirty, supports only several data types, and in any  case
       cannot  be  stated  'standard-conforming'! It was designed to be fast, and it is fast. For
       this reason (well, and also because of my laziness ;), there is no ASN.1 parser in braa  -
       you HAVE to know the numerical values of OID's (for instance .1.3.6.1.2.1.1.5.0 instead of
       system.sysName.0).

OPTIONS

       -h     Show help.

       -2     Claim to be a SNMP2C agent.

       -v     Show short summary after doing all queries.

       -x     Hexdump octet-strings

       -t <s> Wait <s> seconds for responses.

       -d <s> Wait <s> microseconds after sending each packet.

       -p <s> Wait <s> milliseconds between subsequent passes.

       -f <file>
              Load queries from file <file> (one by line).

       -a <time>
              Quit after <time> seconds, independent on what happens.

       -r <rc>
              Retry count (default: 3).

QUERY FORMATS

       GET: [community@]iprange[:port]:oid[/id]

       WALK: [community@]iprange[:port]:oid.*[/id]

       SET: [community@]iprange[:port]:oid=value[/id]

EXAMPLES

       $braa public@10.253.101.1:161:.1.3.6.*
              Walk the SNMP tree of host 10.253.101.1 with public string querying all OIDs  under
              .1.3.6:

       $braa 10.253.101.1-10.253.101.254:.1.3.6.1.2.1.1.6.0
              Query the whole subnet 10.53.101/24 of for system.sysLocation.0

       $braa private@10.253.101.1:.1.3.6.1.2.1.1.6.0=sMy network
              Tries to set the value of system.sysLocation.0 to "My network" at host 10.253.101.1

BUGS AND LIMITATIONS

       *      The  only  supported  datatypes  are:  integer  (gauge,  counter,  timeticks, etc.)
              counter64,  string,  ipaddress,  OID.  Of   course   you   are   free   to   modify
              braaasn.c/braaasn.h to support more types...

       *      braa  will  never  send  more  than  1500 bytes (or a single packet) to a host in a
              single try. Thus the number of queries that might be  sent  to  a  single  host  is
              limited.  Additionally, if you reach the limit by specifying too many queries, braa
              will terminate the whole scanning process... I can't tell what  the  limit  exactly
              is,  it  just  depends  on  many  factors  (mainly, the length of OIDs), anyway, 15
              queries per hosts sounds dangerous, and better try not to exceed this number.

       *      It is impossible to specify FQDN hostnames - you always have to give  IP  addresses
              of  hosts...  well, I think it'll be corrected in future versions, if there will be
              ones.

                                                                                          BRAA(1)