Re: [NSE] Local IP geolocation script

[Kris Katterjohn <katterjohn () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/17/2008 03:48 PM, jah wrote:
> On 16/11/2008 19:10, Philipp Emanuel Weidmann wrote:
> > Interesting ports on fx-in-f99.google.com (74.125.39.99):
> > PORT  STATE    SERVICE
> > 5/tcp filtered unknown
> >
> > Host script results:
> > |_ IP geolocation: United States (US)
> >
> >
> > Hope you find it as useful as I do. Have a great day.
> >
> > Philipp Emanuel Weidmann 
> Hi Philipp
>
> This is a nice script and probably caters well for the seriously
> paranoid!

Indeed, I think this script is quite cool.

> I think it should also be in the "safe" category, but not so
> sure about being in the default one given that it requires a file which
> is unlikely (?) to be shipped with Nmap and thus not present in many
> installations.

I agree here to add it to Safe (as you have done) and remove it from Default.

> Having said that, it occurred to me that nmap.fetchfile() could be
> called from the scripts hostrule to check whether the file is present
> and to store a value in the registry so that this check would not need
> to be repeated for any further targets in that hostgroup.

While we're on the topic of grabbing the file, don't forget we can have a
scripts/data directory just like the nselib/data we currently use instead of
cluttering up the base directory.

For now maybe it's best to add an empty scripts/data directory for things like
this until we have a script which ships with its own data (and thus create
this directory for it).

> Regards,
>
> jah

Thanks,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQIUAwUBSSH6Gf9K37xXYl36AQKH3Q/4v3Weguhuq35iOoXeVvc2jVgnbef8oeZW
wkdPo3qTvRdL0s3YW2lxQ2kMiyM59dEWMkzmYpk6kp2/EC/eWcNrxrKeX4WBnhRf
D/4OY79JkUBzaRClJyoM7cdLwQvKS5NKjhxpPWV7ckFlLoByGJciVPpYaqz5li2f
L5BrUwCDkC0q14fnV6b/0r62ZXAfamEp1e0r6+gmtHCFexXcWqxfswGwqNwVoC2B
hWhcdG+0L+eXoYBlCe7fAUyua9OEiJ6mBoGrSV/J6FHKT8s7B/2sc/FKK+g11CC/
0LzQJTD/6YIzJMH8SEDxjSr91MhrbVgpmCiPFZ4R72njSqWQ2El6KP5akec7WU4R
b9atvUKWoFW57R9PnQWur1JZlRvpF/EJZ/qLyTMReu6WHcNiqiPa6v4Qx9WCgkq4
+4NU52zbAWcW7Q/z/GgOrpwALHLF93hpwT3Ii/D/QwDyNc75YBmzE1ZXfFsO7NvP
VnrbV8PyDzrwSeHJBC9oxOxNNkKG8OkCOfhzckcXywEzQ9u0hTEj/Ycf/Lv5oEkH
LeMd0Xg3KFIYGH9Gpw8s7perHHG+CUBN19Cg390hA9VB0qvTOWyRhEOulKECv3b0
/lCzmj1IDuZIf7/R6oMMW3SsCDWruxYecuN2oMeS8C2/emkHZLsuWYuzRcbBiH/m
Foip7tfbHg==
=jc45
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org