Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: [NSE] New scripts vuze-dht-info, vuze-find-nodes
From: Toni Ruottu <toni.ruottu () iki fi>
Date: Mon, 28 Nov 2011 16:07:49 +0200

  Gorjan,

Do you have any idea how this is supposed to work? Did you consider
adding support for vuze dht to the bittorrent library? Do you think it
would make sense to add the support now, that we have a vuze library?

By looking at the code I get the picture that vuze-find-nodes attempts
to extract information about any connected nodes by trying out random
IDs. The bittorrent library does not work like this. Instead it lets
the user provide an ID as a magnet link or torrent file and uses the
ID to query the DHT. So the bittorrent library lacks support for
extracting node information by brute force, where as this script
doesn't support scans on specific IDs. I'll leave it up for discussion
which one we need, or if we should have both. I am a bit worried that
supporting one way for bittorrent dht, and another way for vuze dht
may confuse users.


To be honest, I don't understand all of this protocol or how it is ment to
work, but as far as I can tell several consecutive requests with the
vuze-find-nodes script gets the same list of nodes.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault