Re: GSoC : CPE , SCTP ,Update feed

[Daniel Roethlisberger <daniel () roe ch>]

David Fifield <david () bamsoftware com> 2011-05-03:
> On Wed, May 04, 2011 at 01:03:54AM +0200, Daniel Roethlisberger wrote:
> > Sorry for replying on a month-old thread, but I think it's worth
> > a comment:
> >
> > ambarisha b <b.ambarisha () gmail com> 2011-04-03:
> > > On Fri, Apr 1, 2011 at 11:16 AM, David Fifield <david () bamsoftware com> wrote:
> > > > > One more idea I had in mind was adding SCTP support for NSE.But there
> > > > > was mention of some problems being reported about the SCTP
> > > > > functionality.First that has to be investigated.
> > > >
> > > > I don't remember hearing of problems with SCTP in NSE? Can you remind me
> > > > what they were?
> > >
> > > May be I was a bit unclear,I meant the normal -sY/-sZ scans.Have a
> > > look at this discussion tagged in the
> > > todo:http://seclists.org/nmap-dev/2009/q2/672.It might just be a
> > > misconfiguration in the network.Still its worth a look.Presently, I
> > > get all the ports filtered.Perhaps, scanme.csnc.ch is now firewalled ?
> >
> > The SCTP scanme box can still be reached at scanme.roe.ch.  UDP
> > and TCP are filtered, ICMP and SCTP are unfiltered.  IPv4 & IPv6.
>
> According to the nmap-ipv6 branch, all IPv6 ports are closed, while 7,
> 9, and 80 are open for IPv4. Is that right?

That's correct, although you have missed 25/sctp, which features
an interactive SCTP based SMTP dummy service.  SCTP based SMTP is
not something I've seen for real, that's why it's not in the
services file (and thus not in the top 1000 ports).

My SCTP dummy service "framework" (see sctp-service.h in the
private area of the repo) does not support IPv6 yet.  Which is
something that should be remedied, I agree, and easy to remedy
too.

-- 
Daniel Roethlisberger
http://daniel.roe.ch/
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/