
Module: mod_kmods
Author: Brian Wotring (brian@shmoo.com)



DESCRIPTION:

The mod_kmods module obtains a listing of loaded kernel modules or
system services on Windows.  It stores each kernel item in a text 
scan record so the comparison is a basic string compare.  The format
varies from platform to platform:

on windows:

    service:<value>;dname:<value>;status:<value>

on FreeBSD:

    refs:<value>;size:<value>;name:<value>;modules:<values>

on OpenBSD:

    type=<value>;id=<value>;size=<value>;ver=<value>;name=<value>

on Solaris:

    id=<value>;loadcount=<value>;state=<value>;name=<value>

on Linux:

    same as /proc/modules format.

on Mac OS X:

    same as kextstat output format.

USE:

To use this module, all  that is needed is to include it in the System
block of a scan configuration, e.g.:

    <System>
    ...
    Include mod_kmods
    ...
    </System>


PARAMETERS:

There are no parameters for this module.

PLATFORMS:
    
Currently, this module is implemented for Windows, FreeBSD, OpenBSD,
Linux, Solaris, and Mac OS X.

NOTES:



