In order get things up and running,
- You will need PERL 5.000 or better, and a WWW browser (Netscape or
Mosaic preferred, some Lynx versions may have a problem). SATAN looks
a lot better on a color display. The FAQ gives hints for MONO screens.
- When you collect or view data about hundreds of hosts you will need a
machine with enough CPU power (sparc5, indy, or better) and memory
(32 MB or better).
- Run the "reconfig" script. It will patch some scripts with the
pathnames of your PERL 5 executable, and of your WWW browser. If
SATAN does not find the WWW browser that you want to use, edit the
config/paths.pl file and change the line
to whatever browser you prefer (make sure to preserve the quotation
marks and punctuation of the line.)
- Run the "make" command. It will ask you to specify a system type.
Most mainstream system types are provided.
- When your network lies behind a firewall, you should unset your proxy
environment variables (such as $http_proxy $file_proxy, $socks_ns,
etc.) and/or change your browser configuration to not use your SOCKS
host or HTTP Proxy (see your HTML browser's option section.)
- Run the "satan" script. When run without arguments, it will start up
a WWW browser. The command-line interface is described in the satan.8
manual page ("nroff -man" format). You must run SATAN as superuser if
you want to collect data.
- You can run multiple SATAN process in parallel to speed up data
collection, but each process should be given its own database (for
example, via the "-d" command-line option). We use one SATAN database
per subnet of 256 addresses. After data collection you can merge
SATAN databases with the HTML browser (see the documentation on
scanning and databases for more on this.) Parallel code and sharing
of databases will come at a later date.
- Use your browser's PRINT button to print reports.
Most documentation is accessible via your WWW browser.
Last but not least, SATAN was written to improve Internet security.
Don't put our work to shame.
Wietse Venema / Dan Farmer