Ok, here is the ToneLoc Tip (secret)
(Provided you need to be pretty exact about your war dialing and have limited time and need to get the footprint right the first time)
(others need not apply)
Over the hundreds of thousands of numbers I have war dialed I have stayed true to ToneLoc for footprinting, but occasionally in the past it has disappointed me. Here is the problem. You can kick off a simple range dial (say 2,000) numbers and if one of the modems or numbers it encounters has a problem the modem you are dialing with could possibly get hung. A hung modem means no more dialing from that point, or even worse, a hiccup in the results. Inconclusive results are not fun to deal with and hard to stand behind. Being in the Big5 security consulting space for 8 years and being tasked with such exotic projects as war dialing and penetrating the corporate world, budget and time constraints were always in play for these high profile engagements. Additionally many of the clients who may have wanted this type of engagement did so with some levels of secrecy and might have limited the windows of operation to perform war dialing tasks to the evenings or weekends. Hence, if you are in this mode of operation as a consultant every single hour of the exercise counts.
So after enough times of having hiccups using ToneLoc (not because of the program, but the modem it uses or the number it got hung on) I devised a simple concept to wrap the ToneLoc program in a batch file. Wrapping is not really what's happening, but the concept here is to use the power of ToneLoc once for every number and not let the ToneLoc program run the show. You run the show with a Batch file (BAT). Since devising this scheme I have reduced failure to a once in a blue moon concept. To be honest I can not even remember this process failing ever. Why? BECAUSE THE MODEM RE-INITIALIZES EVERY TIME with this method. Re-initialization of the modem every time means practically no hiccups or no failures and no increase in processing time. Check it out.