User manual

139
Appendix G: A Sample Standard
PhoneSweep Report
Executive Summary of PhoneSweep Scan
Profile Name: SAMPLE_REPORT
Report Generated: Thursday, March 16 2000 12:17:52
Time of First Call: Wednesday, March 15 2000 13:44:28
Time of Last Call: Wednesday, March 15 2000 13:53:06
Elapsed Time During Scan: 9 minutes, 3 seconds
Phone Numbers Assigned to Dial: 5
Number of calls made: 12
Phone Numbers Dialed using Single Call Detect™: 5
Phone Numbers Dialed using Data-only Mode: 1
Phone Numbers Dialed using Fax-only Mode: 0
Phone Numbers Checked for Data: 5
Phone Numbers Checked for Fax: 5
Search for modems completed: 100.0%
Search for fax machines completed: 100.0%
Username/password guessing completed: n/a
Modems found: 1
Systems compromised: n/a
When the report was generated, PhoneSweep was configured to scan for both fax machines and modems.
PhoneSweep was configured to only connect to and identify modems, but not to attempt to penetrate them.
Engineering Summary of PhoneSweep Scan
Profile Name: SAMPLE_REPORT
Scan Started: Wednesday, March 15 2000 13:44:28
Scan Stopped: Wednesday, March 15 2000 13:53:06
Elapsed time: 9 minutes, 3 seconds
Report Generated: Thursday, March 16 2000 12:17:52
Introduction:
PhoneSweep is a program developed by Sandstorm Enterprises (http://www.sandstorm.net) to search for modems
within a set of phone numbers. PhoneSweep attempts to identify systems attached to remote modems as well as
attempting to find areas of poor security by guessing common usernames and passwords.
Some modems are of higher quality than others, and can report more information about a remote phone number.
These modems can recognize remote fax machines, phones answered by human beings, or simply just when a
remote number is ringing. Sandstorm Enterprises, Inc. makes available a recommended modem list, including
modems known to work well with PhoneSweep
Without a recommended modem, PhoneSweep must rely on a time-based timeout to end a connection. It will only
be able to differentiate between calls to modems, busy signals, and calls that timed out. PhoneSweep will not then
include a list of fax, voice, and ring timeout numbers.