RE: OS Detection

Hi,

  I have added an option (--osscan_only) in NMAP for OS detection (only). This code is optimized to scan ports till one open port and one closed port is found instead of scanning 1659 ports.

please find attached the nmap3.50-osdetect.patch.

Thanks,
Ganga

-----Original Message-----
From: Ganga Bhavani [mailto:GBhavani_at_everdreamcorp.com]
Sent: Wednesday, June 02, 2004 10:32 AM
To: nmap-dev_at_insecure.org
Subject: OS Detection

Hi,

 We are trying to use the Nmap for OS detection. Going through code, I
 found that NMap queries 1659 ports for usual scanning but uses only
 one open port and one closed port for OS detection. If the user is using
 NMAP for only OS detection (only -O), can the scanning process be
 terninated as soon as one open port and one closed port is found ?

 This is to optimize this particular option.I would like to know if there any downside to this approach?

Any other suggestions to optimize the OS detection ?

Thanks,
Ganga

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to
nmap-dev-help@insecure.org . List archive: http://seclists.org

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to
nmap-dev-help@insecure.org . List archive: http://seclists.org