mailing list archives
Re: nse crypto
From: David Fifield <david () bamsoftware com>
Date: Mon, 14 Mar 2011 15:03:20 -0700
On Sun, Mar 13, 2011 at 10:15:43PM +0200, Toni Ruottu wrote:
Do we conclude that we need to do performance testing on the nping
server to see how well it performs in regular cases? And then we may
or may not find the reason why the brute force script is so slow.
It can be traced to these lines in EchoServer.cc:
/* Start the nsock loop. This never returns. Server quits on CTRL-C */
nsock_timer_create(nsp, empty_handler, 1000, NULL);
Though the comment says it never returns, this actually runs once a
second. Only one connection is accepted per time that this code runs.
Reducing the nsock_loop value to 200 allows 5 password guesses per
second, for example.
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/