Nmap Development mailing list archives
[Zenmap-Patch] Reducing Topology Noise
From: Jay Bosamiya <jaybosamiya () gmail com>
Date: Sat, 21 Jun 2014 15:47:34 +0530
Hi All!
I've been working on reducing Zenmap's Topology view to reduce noise due
to anonymous hops.
Basically what it does is this:
/ anon_1 \
..-> ip_a ip_b -> .. => .. -> ip_a -> anon -> ip_b -> ..
\ anon_2 /
A big thanks to Anders Sundman for sending in a patch [1] that tried to
do this. Your patch helped a lot though it only solved part of the
problem (worked with only single anonymous hops in parallel).
The current patch can also handle things like:
/ anon_1 -> anon_2 \
..->ip_a ip_b->.. => .. ->ip_a -> anon -> ip_b->..
\ anon_3 -> anon_4 /
Attached is the patch. Also attached is a zip file containing XMLs to
test with (traceroutes with anonymous hops in different combinations).
There are a few cases that we need to think about, however, namely
"anon_hops_at_known.xml" or "hop_split.xml" (from the zip file attached).
For "anon_hops_at_know.xml", I think that the anonymous hop should be
removed completely (since 1.1.1.2 fits perfectly instead of the anon).
I think that it should work like:
/ anon_1 \
..-> ip_a ip_c -> .. => .. -> ip_a -> ip_b -> ip_c -> ..
\ ip_b /
For "hop_split.xml", I am not sure what should be done. Currently, it
works like:
/ anon_1 -> ip_b -> ..
..-> ip_a
\ anon_2 -> ip_c -> ..
but I think it would be better if it became:
/ ip_b -> ..
..-> ip_a -> anon
\ ip_c -> ..
I have not implemented the 2 changes since I wanted some feedback before
I did so.
Cheers,
Jay
Attachment:
noiseRemoval.patch
Description:
Attachment:
testXMLfiles.zip
Description:
_______________________________________________ Sent through the dev mailing list http://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [Zenmap-Patch] Reducing Topology Noise Jay Bosamiya (Jun 21)
