Re: Some hints for nmap scripts

[jah <jah () zadkiel plus com>]

Hello Dirk,

You can receive raw packets and send ethernet frames in scripts using
the Raw packet network I/O API [1].

The only script currently using this stuff is one named promiscuous.nse
in Nmap versions up to 4.76 (now named sniffer-detect.nse) (as an aside,
this script has a commented-out section between --[[ and ]]-- which is
not the correct way [3] - it should be --[[ and --]], but for some
reason the script still works as expected and considers the improperly
commented section as a properly commented section - v. odd.)

You can find definitions for the dnet and pcap functions as part of the
NSE documentation for the nmap module [2].

Hope that helps a bit.

jah


[1] - http://nmap.org/book/nse-api.html#nse-api-networkio-raw
[2] - http://nmap.org/nsedoc/modules/nmap.html

[3] - http://www.lua.org/pil/1.3.html

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org