Re: NSE Infrastructure: Eliminate script.db

[Kris Katterjohn <katterjohn () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Fyodor wrote:
| On Mon, Mar 24, 2008 at 03:27:46PM -0500, Kris Katterjohn wrote:
|> Unfortunately, everytime I write a new script I have to set NMAPDIR and
|> use -script-updatedb to update the script database in my nmap
|> directory--for a lot of simple scripts this gets old :).
|
| Hi Kris.  Thanks for the suggestion.  You are supposed to be able to
| do:
|
| nmap --script ./mynewscript.nse
|
| Is that not working for you?  You shouldn't need to add it to the DB
| unless you want to call it by category.
|

Hey Fyodor,

Specifying the script by name works just fine; however, I often have
custom scripts that I like to use along with the ones shipped with Nmap.

I often call by category :)

|> I was thinking that Nmap could use the steps it takes to build the
|> database file, but instead of writing to the script.db it could just
|> build the internal list of scripts (or however it works--I'm not
|> well-versed in the innards of NSE).  This would eliminate the
|> - -script-updatedb option and the script.db.
|
| Well, we added the script.db for efficiency reasons.  It may not make
| a huge difference now, but it might start to as the number of scripts
| continues to grow.  I believe Diman did some testing with 10,000
| scripts.  Right now we only have about 50, but the system is still
| new.  Nessus has more than 21,000 plugins.

That's what I figured.  I knew I couldn't make completely accurate
assumptions based on my current NSE usage, and I definitely haven't
tried with 10,000 scripts :)

In my case, it would be very convenient to have Nmap dynamically
generate the list.  But when it's all said and done, and after hearing
yours and Brandon's responses, the DB is definitely the way to go.

|
| Cheers,
| -F

Thanks,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQIVAwUBR+g0rf9K37xXYl36AQJaww//attEbH9C8B/4FSh/zxESSAzfmIw/0TlY
TMVW2KwMsu5idCGt41gfDkQOYML6rRP2FjL4e/96gSjRrVibV9SUFlnAexZe4H8Y
OCmY8lvoqWMIn7qhi9uPqPPJA5XqELsf5ncFBtMHakppruHALtwvbQRiE9FGuCWe
sXwIrFCbE+klrfZTS33RAEcvvrfYdMssUctUec+VTgu4YNVW30hEqlj76MxEFG/F
zdbSTBe/a15dZ6DsGeLEjpWTszVO8FnsMjPqYSMza3Kwe+Z82EweKlbMLw7UusGt
lUoOg3Ox07hS37/z9AhYZzRJOGh9FyOBqrem+FKzN4r8XfMva2VSs/2jgeToImvl
5rlRqypCkKXKAoWo/nPaYyz7apo3sif7y5tuxn4Xu4k5WWA1PEwMBbtG6RnTO7we
BrG+V7SKmlpX2SKQ52qk4wsl3XkPbUZ9ibEUZFIKWOfwkNfEzo9nRJ2GTomkVmVr
Qy6VHyFgicsKpxKeXhU9kRLIMzParHypPMXKO1k8I6DOIzDCCwwfcMiO5DkDTf5c
Jm6hCrO9e4SaviazIahB3weMKu3yKwmyXa4YCVaiufnpZJsCzBOixQxfv80BO2GI
o3+91TLw3aNIkYkvwVQIWGgKsD7z3CpQAlV6UGTxQwSYmD4DXbEMKGIfSa71L3sJ
b8ExinAIT/E=
=E2Y2
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org