Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Development: Re: Possible Nmap Suggestion

Re: Possible Nmap Suggestion

From: William McVey <wam_at_cisco.com>
Date: Mon, 16 Oct 2006 16:33:41 -0500

On Sat, 2006-10-14 at 15:57 -0500, Alan Jones wrote:
> The name parameter could be used as a simple description to remind the
> the person scanning what was special about one scan as opposed to the other.

I like this suggestion as it allows me to attach metadata into the scan
results which can then be queried or keyed upon in a very site-specific
manner. I'd highly recommend not limiting it to a single invocation of
the --name (or perhaps --tag?) option. I'd suggest allowing as many
option invocations as desired, and each one resulting in a new element
node (perhaps as a child of <scaninfo>). To me the real utility here is
to attach site-specific semantics into the output stream. Currently,
folks are doing this with filenames and directory hierarchies, but it's
hard to get access to that info from within an XSL transform or XPATH
query.

> I am not sure how easy it would be to implement but if it basically
> could declare anything in between a set of quotes " " as the description
> would be best.

So long as the 'anything' is properly quoted for an XML output stream,
yes.

  -- William

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Oct 16 2006

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]