Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: [PATCH] nmap-service-probes: Misc database corrections, printer additions
From: Fyodor <fyodor () insecure org>
Date: Sat, 28 Feb 2009 01:34:59 -0800

On Sat, Feb 28, 2009 at 01:22:40AM +0000, Brandon Enright wrote:

My current thinking is that we will make a few different probes, a PJL,
a PCL, a XEX, and a IPDS.  I haven't started on IPDS but here is the
spec:

The printer port version detection work is great!  But remember that
for version detection, every new probe adds extra time to the VD
process for non-matching services.  So if we can get the same results
from just one probe, that is preferable.  Still, it is definitely
worth testing multiple probes to determine which one works best.  And
it may turn out that we do need multiple probes to catch everything.
But if we can avoid that, we should.  If we have to have multiple
probes, things like the rarity value and well-set probable ports
fields can help.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]