SDIG.CONF(5)

NAME
sdig.conf - Configuration for the Switch Digger

DESCRIPTION
sdig(8) uses this file to learn about your network's configuration. It is essential to proper operation.

DIRECTIVES

ROUTER network addr community description
    List a router for the network network (CIDR or a.b.c.d/x.x.x.x format) at IP address addr using SNMP community community. The description provides some details when generating the output. Remember to wrap the description in "quotes" if it contains any sort of whitespace (spaces, tabs, etc).
        ROUTER 192.168.3.0/24 192.168.3.1 mycommunity "Company core router"

SWITCH network addr community description
    Like ROUTER, but for a switch instead.
        SWITCH 192.168.3.0/24 192.168.3.2 mycommunity "Upstairs data room"
        SWITCH 192.168.3.0/24 192.168.3.3 mycommunity "Downstairs data room"

LINKINFO addr port num description
    Describe a connection between switches so it won't show up on the normal sdig display. This limits your findings in normal mode to port(s) that probably lead to the target host. Use verbose mode to display all of them, even the ones that just go to other switches.
        LINKINFO 192.168.3.2 24 "link to downstairs switch"
        LINKINFO 192.168.3.3 24 "link to upstairs switch"

PORTDESC addr port num description
    Describe a port in a switch. Usually used for details like patch panel numbers and other things that can't be inferred by asking the equipment directly.
        PORTDESC 192.168.3.2 1 "Upstairs patch panel #10"
        PORTDESC 192.168.3.3 25 "Fiber to remote site"

WINS addr
    Tell nmblookup to use the WINS server at addr for name lookups. Only used when NMBLOOKUP is defined and DNS lookups fail.
        WINS 192.168.100.1

NMBLOOKUP path
    Specify the path to Samba's nmblookup binary. This might be /usr/local/samba/bin/nmblookup if you do a stock install from source. This program is optional, and is provided to augment DNS lookups in environments laden with Windows machines.
        NMBLOOKUP /usr/local/samba/bin/nmblookup

NBNAME path
    Specify the path to the nbname program which is provided in the sdig source distribution. This program connects to a host on port 137/udp and interrogates it to get the NetBIOS name. The only catch here is that it has to run as root to bind to port 137 on your local system, since Windows 95 boxes stupidly don't answer queries from other source ports. This is strictly to add extra information to the lookups, and is optional. It is handy when your DNS entries are all dynamic things like foo11-23.example.edu and your hosts go around calling themselves things like "CHE-KINDERGARTEN".
        NBNAME /usr/local/bin/nbname

MACTABLE path
    Specify the location of the MAC table file. This is another item that is used to provide a few more bits of information when tracking down a system. You might use it to find rogue NICs that are not the company-approved brand. This file is rather large and rarely changes, so it's not included in the source distribution. You can get it on the main sdig web site - http://www.exploits.org/sdig/
        MACTABLE /etc/mactable

SEE ALSO
sdig(8)

AUTHOR
Russell Kroll <rkroll@exploits.org>