how shazzam scan open ports in servicenow discovery

[manju30]

Hi, this is manjusha , i am currently exploring servicenow discovery.

I am not getting the exact process of discovery like how shazzam port scan open port like and other.

please tell me

Regards,

Manjusha Bangale

[tim_broberg]

It's complicated, Manjusha.

There are seven different scans available.

You can seem them in Discovery Definition / Port Probes in the Scanner column.

• "Generic TCP" just tries to establish a TCP connection.
• "Generic TCP with Banner" expects a banner to come back and sticks the response in the probe response. (This is handy to see what version of SSH the server is running, for example.)
• "SNMP" is a complicated multithreaded asynchronous juggling act with retries that advances through multiple versions of SNMP protocol.

I'm not sure about the others.

Your IP ranges are chopped up into segments and spread across the available mid servers. Unlike most probes, these are not randomly load balanced because you really want these to be spread out evenly as there is no other work available until the shazzam responses come back.

I'm sure that doesn't answer all your questions, but hopefully it answers some.

    - Tim.

[karmeng]

Hi Manjusha,

Check if following KB helps to answer your questions.

ServiceNow Customer Service System

Regards,

Kar Meng

[Marlos]

Hi Manjusha,

The bulk of the Shazzam logic is in the server side code of our Platform. What Shazzam does is to basically act as a port scanner on the given services, on the given IP or IP collection, and then passes back the results.

[Vivektietsood]

I have also submitted two articles specifically on discovery. I invite you to look at those and like or bookmark or comment if you find them useful. Thanks, again.

ITOM Series 3 : Discovery Fundamentals Article 2

ITOM Series 3 : Discovery Fundamentals