Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: Patches for a log_output bugfix, and a --no-clobber implementation
From: Kris Katterjohn <katterjohn () gmail com>
Date: Thu, 06 Oct 2011 18:29:38 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/06/2011 06:14 PM, David Fifield wrote:
On Thu, Sep 15, 2011 at 01:33:48AM +0200, Dominic White wrote:
Thanks for the helpful feedback David, you made a first time post
easy. Some questions, if you wouldn't mind inline.

On 14 Sep 2011, at 6:38 PM, David Fifield wrote:
The second set of patches provide two methods of implementing a
--no-clobber function. I regularly find myself overwriting scans by
hitting the up key in my CLI, editing the options but forgetting to
update the -oA argument. I know this is "human error" and the --append
flag technically caters for this. However, --append doesn't fit
cleanly, as a user usually wouldn't mean to append to that file in the
case of error. People who, like me, have this problem can alias "nmap"
to "nmap --no-clobber" in their shell environment.

For this, have you considered using %D and %T in your log file names?
Those magic sequences get replaced by the current date or time. If you
run
    nmap -oA log-%T
then Nmap won't clobber files, unless you do it more than once a second.

I have, the problem is when I am being somewhat careless in the thick
of a pentest. Hence the want to have it alias'ed in my shell, to
prevent such carelessness.

I'm not sure what to do about this patch. I'm afraid it may not be
useful enough to justify adding yet another option. But maybe there have
been other people who have had trouble with log files being clobbered,
and just never spoke up about it. I'm inclined to accept the patch, but
only if some people speak up for it.


I used to occasionally (well, rarely) clobber files, but never since I
implemented the log file sequences like %T (which has been quite a while).

I don't really think the suggested behavior is important or useful enough
(given %T, etc.) to add an option for it, but if it does get added then I
think it should maybe be renamed to something like "--no-clobber-output" to
match "--append-output" (sorry if this was mentioned before, I only skimmed
this thread again).

David Fifield

Cheers,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJOjjndAAoJEEQxgFs5kUfuEjMP/irjfsatFN907GRM0hA/bCDW
pF4+mp43op3rOZKZFovr0L+vQZLZOGOjlYrJW5EiC/VL4PUcH8zqfXhNjxDNPG0y
Kv1GXCxqZv/qtxa1jmsM8KMZ6RrsBWEYxgJLKv6M/yz5ombAjnGV/T0qCjDXxmGA
yUx0cHS0JlShEIWJ2XCKEhdOOqEs195o2dqtHBmQI07kRM9KMKyv1a3jqzWyoziK
cQH8U7t0afwK52UgtJAYXoYsQ8iNwG3W+Bfgto41iTBmbwDo3OE9RPMRJvXww6Pl
fcWy1K7ANH1LQbsBbUTwSWSI/8XN+fnDBjCZvEXLCcki07z+k1Hv9TV+wCO3c4jm
GQRMNwCQEewBGg3g0/Da7ca2OH2aaGQMYSI1ZDn9Q8kIvCMSPfkoc+VFI0ViGm4P
q6BqXkCS3Qufyhtqaxg2mdAovPYNP9WEy19vmXoJm1Yb8yW5/jXKEUKeJPhXZjYd
gdyUwB0RLdLP2ZZXrLel8j2zdPog8SBCp1fX7OrBYmwo1lBsFP32Pii4caEOgIZW
x9yAZ+sV/Ak+dmD1zIaNdxkTY2Lh75X44vOq2tTty8Y0aTqo6gL5qfRJ/UU8WMYy
JY+qdsWyZ0akgeqHj4H59OYF96+hTqmlkBkXN1FMnP8RQJ68JUaglgUrxo7nOtPW
mgPlP0pDFy1hQVHRdAo4
=uJRD
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault