Home page logo

nmap-dev logo Nmap Development mailing list archives

Services matched by script--show a service fingerprint?
From: David Fifield <david () bamsoftware com>
Date: Sun, 27 Mar 2011 14:39:03 -0700

Dhruval Gandhi's screenshot at http://seclists.org/nmap-dev/2011/q1/1014
shows port 80 being matched as skype2 by the skypev2-version.nse script,
but a service fingerprint is being shown anyway.

We usually get a bunch of Skype service submissions in each batch, which
I have to ignore because service detection can't match it (that's what
skypev2-version.nse is for, after all). I thought that perhaps the
script was failing for some reason, but now I see that if a service
produces output, it can cause a fingerprint to be displayed even when a
script later matches the service.

Should it work this way? How about hiding the fingerprint (and request
to submit it) when a service is hardmatched by NSE?

David Fifield
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]