I really like this idea, much more idiomatic :).
On Dec 20, 2007 10:47 PM, Fyodor <fyodor_at_insecure.org> wrote:
> Maybe we move things such as the OS fingerprint out of attributes and
> into plain content. So instead of having:
>
> <osfingerprint fingerprint="
> SCAN(V=4.50%D=12/20%OT=22%CT=70%CU=%PV=N%G=N%TM=476B362D%P=x86_64-unknown-linux-gnu)
> SEQ(SP=C7%GCD=1%ISR=CA%TI=Z%II=I%TS=A)
> OPS(O1=M5ACST11NW7%O2=M5ACST11NW7%O3=M5ACNNT11NW7%O4=M5ACST11NW7%O5=M5ACST11NW7%O6=M5ACST11)
> WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
> ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5ACNNSNW7%CC=N%Q=)
> T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
> T2(R=N)
> T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5ACST11NW7%RD=0%Q=)
> T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
> T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
> T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
> T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
> U1(R=N)
> IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)
> " />
>
> We could have:
>
> <osfingerprint>
> SCAN(V=4.50%D=12/20%OT=22%CT=70%CU=%PV=N%G=N%TM=476B362D%P=x86_64-unknown-linux-gnu)
> SEQ(SP=C7%GCD=1%ISR=CA%TI=Z%II=I%TS=A)
> OPS(O1=M5ACST11NW7%O2=M5ACST11NW7%O3=M5ACNNT11NW7%O4=M5ACST11NW7%O5=M5ACST11NW7%O6=M5ACST11)
> WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
> ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5ACNNSNW7%CC=N%Q=)
> T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
> T2(R=N)
> T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5ACST11NW7%RD=0%Q=)
> T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
> T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
> T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
> T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
> U1(R=N)
> IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)
> </osfingerprint>
>
> Would that resolve Joćo's issue? I'm trying to remember if there was
> a good reason that we put almost everything in attributes.
>
> Cheers,
> -F
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org
>
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Dec 20 2007