RE: Time to lose gen1 OS detection?

["Dario Ciccarone (dciccaro)" <dciccaro () cisco com>]

I run a gen2 scan on my home network last nite - and results were less
than desirable. I'll run the same scan with gen1 - see what the
differences are.

Gen1 has been around for a long time - and unless you deem it amazingly
buggy, I would keep it until the next main release *after* this one -
give time for people to submit new sigs, see if the new db can get up to
the same qty of sigs the old one has. 

Just my 2 cents :)

Dario
 

> -----Original Message-----
> From: nmap-dev-bounces () insecure org 
> [mailto:nmap-dev-bounces () insecure org] On Behalf Of Fyodor
> Sent: Sunday, October 28, 2007 11:51 PM
> To: nmap-dev () insecure org
> Subject: Time to lose gen1 OS detection?
>
> 1st generation Nmap OS detection had a great run, lasting 9 years.
> But now that the 2nd generation DB has grown considerably, it may be
> about time to let gen1 OS detection go.  It complicates the code, and
> the gen1 DB itself takes up more than 800K of space.
>
> Then gen2 system still only has 827 fingerprints compared to 1684 in
> gen1.  But the new system has better fingerprints, and for more recent
> and relevant system.
>
> So gen1 OS detection will probably be gone in the next release unless
> I hear from people who can demonstrate good reasons for it to stay.
> If you scan large networks and find that -O1 still works better than
> -O2, that's the sort of thing we'd like to hear.
>
> Cheers,
> -F
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org