Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: non existent script called with --script=all
From: Fyodor <fyodor () insecure org>
Date: Mon, 27 Apr 2009 18:45:34 -0700

On Mon, Apr 27, 2009 at 05:18:02PM -0500, Kris Katterjohn wrote:

When I suggested this very same idea over a year ago (when it was shot down by
you and Brandon), you said that Diman had already tested with many scripts:


(and http://seclists.org/nmap-dev/2008/q1/0513.html is Brandon's detailed reply)

Hi Kris.  Nice to hear from you!  I suppose that if we end up removing
script.db after all, you can give us a big "I told you so" :).

Diman did do some testing with 10,000+ scripts (well, basically copies
of the same simple script), but that was years ago.  NSE has changed
dramatically since then, so I'd like to see newer benchmarks with
large numbers of scripts before I'd feel comfortable removing
script.db.  We can't really decide whether the logistical hassle is
worth the performance gain until we actually have measurements of the
(presumed) performance gain.  But if the cost of generating the
information at runtime with 1,000+ scripts is immaterial, I'd favor
removing script.db.  We could always revive the system if we ever
exceed that number of scripts and need it again.


Sent through the nmap-dev mailing list
Archived at http://SecLists.Org

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]