Allen-Bradley netstat?

sbagdon said:

did a search, nothing came up...


Doing an audit, and looking for an active port-inventory, such as netstat... yet can't seem to find anything like that for our Allen-Bradleys.


Does such a thing exist, as netstat, in the plc world?


Thx!

Click to expand...

sbagdon said:

This is mainly for documentation purposes... netstat in win/unix shows all active listeners, plus all active inbound/sockets, for both sender and receiver. trying to create some visio docs, for onboarding/training.

fping will show all IPs with icmp turned on (much more useful then ping, with cidr options...), that's easy enough. We know all our PLC devices, it's the socket-traffic entering/exiting we want to measure (not just go by verbal historicals).

nmap will show active listeners on the remote hosts, yet there's some things it misses, and doesn't show outbound sockets.

and yes, we know about external risks...

the best we've come up with is a man-in-the-middle logger, yet that involves some things we don't want to do.

thx!

Click to expand...

drbitboy said:

There is no command-line interface to most PLCs, so no netstat "command." There might be something in the web pages, if the PLC has a server. I expect this will have to be done externally and empirically i.e. try to connect to each port of the PLC using UDP and TCP, and then do some research to find what ports those are.


Sidebar: "audit" suggests "security audit" to me; are these PLCs accessible to non-company-internal actors i.e. the 'net? That is generally a Bad Idea. Think of a PLC on a network like IoT: the S stands for security.

Click to expand...