Page tree

Lumeta discovery methods and the ports and protocols associated with each.

Indexing Type

Purpose/Protocols

Protocol # (PN) or Ports

Passive Discovery

Index real time network change by passively participating in control domain using OSPF, BGP, ICMPv6, ARP, DHCP, DNS

  • PN 1, 89
  • TCP 179
  • UDP 67, 68, 53

Path Discovery

  • Actively index forwarders and paths using ICMP, TCP, UDP, DNS via TTL-tracing, responses
  • Index network infrastructure devices, route
  • tables, ARP tables, switch TCAM, VLANs using SNMP, LLDP
  • PN 1
  • TCP 80, 443
  • UDP 53, 161, 162
  • User-definable ports

Host Discovery

Actively index devices attached to network via ICMP, TCP, UDP, DNS, SNMP interrogation and Responses

  • PN 1
  • TCP 80, 443
  • UDP 53, 161, 162
  • User-definable ports

Device Profile Discovery

Actively fingerprints the indexed census of devices on the network using TCP (OS detection), CIFS, HTTP/S, SNMP

  • TCP 80, 443, 445
  • UDP 161, 162

Port Discovery

Actively index ports by using TCP SYN/ACK response

  • User definable list or all (e.g. port-scan)

Leak Path Discovery

Actively index leak-paths that exist in the L3 routed domain between network segments using Lumeta proprietary TCP packet spoofing

  • PN 1
  • UDP 161, 162
  • User definable
  • No labels