Re: [NSE] Microsoft SQL Server (MSSQL) library and scripts

[Ron <ron () skullsecurity net>]

On Mon, 22 Mar 2010 13:45:00 -0700 Fyodor <fyodor () insecure org> wrote:
> So this is a larger issue than mssql-*.  For scripts which gather
> information from a service, do people think we should generally have
> one gathering script controlled by --script-args, or have a separate
> scripts for gathering different pieces of information?

I'd be concerned about using --script-args to control the information, because I have a feeling a lot of people don't 
know about --script-args. As script integration into Zenmap improves, though, that'll be a smaller concern. It seems 
like it makes more sense to have multiple scripts rather giant scripts -- having smaller ones is more flexible. 

That being said, my smb-* scripts (as well as these mssql-* scripts and a lot of others) offload most of their work to 
nselibs anyways. The scripts themselves can almost be seen as the presentation layer. That doesn't really change 
anything, it's just a random thought. 

One advantage I can see to combining these scripts is re-use of connections. Rather than 10 scripts each making a 
connection to the service, only one script has to. 

A disadvantage would be speed, since NSE's biggest strength is being able to parallelize itself. 

I'm not arguing one way or the other.. just putting some facts out there. 
-- 
Ron Bowes
http://www.skullsecurity.org
http://www.twitter.com/iagox86
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/