Re: [PATCH] nmap-service-probes: Misc database corrections, printer additions

[Fyodor <fyodor () insecure org>]

On Wed, Jul 15, 2009 at 08:50:28AM -0700, Aaron Leininger wrote:
>

> I changed the probe in my script to end w/ "\n" instead of "\r\n" as
> it seems to elicit a better response from certain printers. I found
> that certain printers that appeared non-responsive will get a response
> if I wait long enough. The printer I was testing against seems to
> require 12 seconds to respond to @PJL INFO STATUS and @PJL INFO ID
> probes via NSE but will do so in under 3 seconds via ncat.

Hmm...there must be something different between what you're doing with
NSE vs Netcat (or the client machine, or something).  As some folks
have suggested, you may want to watch both interactions in Wireshark
and compare them.

> Anyway, latest version of script changes probe as stated above and sets timeout to 12000 (12 seconds). 
> I was thinking maybe make the timeout value an optional argument
> that can be passed in via --script-args and default it down to 2 or 3
> seconds. Anyone like/dislike that idea?

The vast majority of script runs are without any extra options, so I
think it is best to default to a safe timeout (waiting long enough for
even the slow printers), and then if you add an option it can be used
to speed things up for people who only care about the relatively fast
HP printers.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org