mailing list archives
Re: [RFC] Output file option for capturing service and os fingerprints
From: Brandon Enright <bmenrigh () ucsd edu>
Date: Fri, 20 Jun 2008 01:06:11 +0000
-----BEGIN PGP SIGNED MESSAGE-----
On Thu, 19 Jun 2008 20:47:45 -0400
"Michael Pattrick" <mpattrick () rhinovirus org> wrote:
I just noticed that Brandon already posted a script for this, but I
wrote one too! lol
It lists all unidentified OS fingerprints(or all fingerprints if the
scan was -v or -d) and all unidentified services.
It requires the latest Nmap::Parser and the output is like this:
This is good because mine doesn't handle OS fingerprints.
It occurs to me that if people are seriously using the servicefp=
attribute we should probably expand the buffer beyond 2k. When I
patched Nmap to include the the fingerprint I limited xml_sf_convert()
routine to 2035 bytes.
I don't have my head wrapped around all the output.cc code anymore so I
can't remember what buffers are where but at only 2k, many fingerprints
will be truncated in XML. Someone should probably look into removing
that limitation so that XML provides the same quality of output
service_fp that "normal" does.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
-----END PGP SIGNATURE-----
Sent through the nmap-dev mailing list
Archived at http://SecLists.Org
Re: [RFC] Output file option for capturing service and os fingerprints Tom Sellers (Jun 20)