ANTFARM (Advanced Network Toolkit For Assessments and Remote Mapping) is a passive network mapping application that utilizes output from existing network examination tools to populate its OSI-modeled database. This data can then be used to form a ‘picture’ of the network being analyzed.
ANTFARM can also be described as a data fusion tool that does not directly interact with the network. The analyst can use a variety of passive or active data gathering techniques, the outputs of which are loaded into ANTFARM and incorporated into the network map. Data gathering can be limited to completely passive techniques when minimizing the risk of disrupting the operational network is a concern.
Please note that version 0.5.0 is the first version where ANTFARM is broken up into two separate components - the core and the command line interface.
If you are looking for a version of ANTFARM pre 0.5.0, please download one of the tagged versions from the ANTFARM-CORE project at http://github.com/antfarm-core.
Because version 0.5.0 is the first version that has the client split out from the core ANTFARM library, the client gem is staying in a 'beta' status while the core library is in 'beta' status.
Note that in order to install a pre-release version of a gem (such as the beta
version of ANTFARM 0.5.0), you must specify the --pre-release option when using
gem install along with the full version name (i.e. --version 0.5.0.beta).
Also, if you have version 0.4.0 and 0.5.0 installed, you can specify which version to use when running ANTFARM from the command line.
To run version 0.4.0, do the following:
$> antfarm _0.4.0_ <command> <options>
To run version 0.5.0, just replace 0.4.0 with 0.5.0 or just leave it off. The
_<version>_ syntax is used by the executable for each gem to allow the user
to specify a specific version. Otherwise, the latest version is used.
antfarm [ ] command|plugin [ <command/plugin options> ]
antfarm -h, --help
While the ANTFARM tool itself is completely passive (it does not have any built-in means of gathering data directly from devices or networks), network admin tools that users of ANTFARM may choose to gather data with may or may not be passive. The authors of ANTFARM hold no responsibility in how users decide to gather data they wish to feed into ANTFARM.
Unless it already exists, a '.antfarm' directory is created in the current user's home directory. This directory will contain a default configuration file, the SQLite3 database used by ANTFARM (if the user specifies for SQLite3 to be used, which is also the default), and log files generated when using ANTFARM. Custom plugins created by users will be made available to the ANTFARM application when they are placed in the '.antfarm/plugins' directory.
Each plugin developed for ANTFARM specifies the input and/or output requirements when being used. To see what inputs are required for a particular plugin, type:
$ antfarm help <plugin>
ANTFARM's default method of operation is to parse input data or generate output data using a specified plugin. The plugin to use is specified on the command line as a sub-command, and each plugin developed specifies it's own required arguments. Global ANTFARM commands include:
-e, --env :
The ANTFARM environment to use when executing the given sub-command. The
default environment is 'antfarm'. Setting the environment variable affects
things like database used, log file used and configuration settings used.
-l, --log-level :
The log level used when executing the given sub-command. Optional levels
include debug, info, warn, error and fatal. The default log level used is
'warn'.
-v, --version:
Display the current version of ANTFARM.
-h, --help:
Display useful help information for ANTFARM.
Display the default help message for ANTFARM:
$ antfarm -h
or
$ antfarm help
Show information about all the plugins currently available in ANTFARM:
$ antfarm show
Show information specific to an available ANTFARM plugin:
$ antfarm help <plugin>
Execute an ANTFARM plugin:
$ antfarm load_host --input-file path/to/host/data.txt
Execute an ANTFARM plugin using a specified environment:
$ antfarm -e foo load_host --input-file path/to/host/data.txt
Execute an ANTFARM plugin using a specified environment and log level:
$ antfarm -e foo -l debug load_host --input-file path/to/host/data.txt
This project uses the major/minor/bugfix method of versioning, similar to the ANTFARM-CORE project. Note that the major version number for this project will always match the major version number for the ANTFARM-CORE project. Any changes to the command line interface will be reflected in the minor version number.
See http://ccss-sandia.github.com/antfarm for more details.
Copyright (2008-2010) Sandia Corporation. Under the terms of Contract DE-AC04-94AL85000 with Sandia Corporation, the U.S. Government retains certain rights in this software.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, distribute with modifications, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE ABOVE COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Except as contained in this notice, the name(s) of the above copyright holders shall not be used in advertising or otherwise to promote the sale, use or other dealings in this Software without prior written authorization.
FAQs
Unknown package
We found that antfarm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.
Security News
Research
Socket researchers found a malicious Maven package impersonating the legitimate ‘XZ for Java’ library, introducing a backdoor for remote code execution.