Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: Exp Branch for OpenSSL on Windows
From: jah <jah () zadkiel plus com>
Date: Fri, 16 May 2008 04:01:18 +0100

On 15/05/2008 17:01, Kris Katterjohn wrote:
Hey guys,

Has anybody tested this at all?  Just let me know if you have/had any
problems.

As I said before, you shouldn't have to change anything in your build
procedure; it should just work.
It built just fine with no changes
.
I had a play with version detection against some ssl websites and
noticed that if nmap couldn't get a version match from "Server Hello"
messages and had to go as far as handling "change cipher spec" and
"encrypted handshake" messages, the cpu cycles went through the roof.
I thought I'd see if building OpenSSL on this machine would make any
difference.  This was straightforward too, due to the great
upgrade-guide (I was thrown slightly by "Compilation failed" messages
when I ran do_ms.bat and thought it might be worth updating the guide to
mention that these can be safely ignored).
I rebuilt nmap with openssl, but it didn't have any appreciable effect
and I note that in the minute that it took to successfully complete
version detection, one of my dual cores was at full-pelt for around 45
seconds.  I'll look into this more deeply, but I wonder if anyone else
noticed similar?

regards,

jah



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]