Hi Buanzo!
On Sat, Sep 29, 2007 at 09:23:48AM -0300 or thereabouts, Arturo 'Buanzo' Busleiman wrote:
> Is this interesting? No, not really. We already knew Qscan could do this.
Yes, it is very interesting to me! I'm glad you're getting use out
of Qscan. It is a powerful technique and can present a lot of useful
information, especially about upstream ISPs as in your case. Thanks
for telling us about this!
> But I'm very happy, VERY happy with Qscan, and I hope to see it integrated into Nmap, or released as
> an independent tool, ASAP :)
Although at some point I plan to make a nuff script for Qscan, this
will not be for a while, as my lisp brain-cells are focused on another
project, one that I hope to reveal soon enough. :)
It's great to hear you're getting use out of the patch. I am not
against maintaining it for Nmap either! As you seem to find as well,
I think it is a great place for Qscan. I almost always have Nmap handy
(as I'm sure most ppl on this list), and am very used to using Nmap for
getting information about ports (duh) so it just seems natural.
I think the most important improvement would be a median filter, which
should throw out the unreasonably high data and make for faster, more
accurate Qscans.
Nmap is in a feature freeze at the moment, but once a stable version is
released I will try porting the patch.
Best of luck on your talk,
Doug
>
> BTW, I'll be showing these kind of tests in my nmap talk next week in Colombia (Anyone from Colombia
> near Manizales that'd like to join me for a beer, send me an email!).
>
> Yours,
> Buanzo.
>
> - --
> Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
> Servicios Ofrecidos: http://www.buanzo.com.ar/pro/
> Unase a los Foros GNU/Buanzo - La palabra Comunidad en su maxima expresion.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFG/kPUAlpOsGhXcE0RChOYAJ4txeGH+1s+D0HCC0pQjgVMb1RJrACeLj9z
> HNsR08H1GBG5qt+ZIFB/YcA=
> =YUwa
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Oct 01 2007