nipper(21)

NAME
nipper - Generates security and configuration reports from network device configuration files

SYNOPSIS
nipper [OPTIONS]

DESCRIPTION
Nipper (Network Infrastructure Parser) processes a supplied device configuration file and, based on the configuration settings, performs a security audit and produces a report. The security audit includes detailed findings, each with an impact, ease and recommendations section which includes the commands required to resolve the issue. The report may also include appendicies containing relevent information. The nipper program interfaces with libnipper, which is where the work is done. libnipper currently supports the following device types:

* Cisco Switches (IOS) * Juniper NetScreen Firewall
* Cisco Routers (IOS) * CheckPoint VPN-1/Firewall-1
* Cisco Catalyst (IOS) * Nortel Passport
* Cisco Firewall (PIX) * Nortel Ethernet Routing Switch
* Cisco Firewall (ASA) * Bay Networks Accelar
* Cisco Firewall (FWSM) * 3Com SuperStack 3 Firewall
* Cisco Catalyst (CatOS) * SonicWALL Firewall
* Cisco Catalyst (NMP) * Nokia IP Firewalls
* Cisco Content Service Switches * HP ProCurve Switches

OPTIONS
--help For help on all the options.

EXAMPLES
To produce an HTML formatted report for a Juniper NetScreen device:

nipper --screenos --input=config.txt --output=report.html

To produce an XML formatted report for a Cisco PIX firewall:

nipper --pix --xml --input=pix-config.txt --output=report.xml

To produce an HTML formatted report for a CheckPoint Firewall-1:

nipper --fw1 --input=/root/config-backups/fw1/conf/ --output=report.html

To produce an HTML formatted report for a Cisco IOS-based router using an external configuration file:

nipper --config=nipper.conf --input=router.txt --output=report.html

AUTHOR
Nipper was developed by Ian Ventura-Whiting (Fizz).

COPYRIGHT
Copyright © 2006-2008 Ian Ventura-Whiting.
The nipper license can be viewed on the project web site http://nipper.titania.co.uk

SEE ALSO
nipper.conf(5)