Re: regarding rpc based protocols and rpcinfo script

[Fyodor <fyodor () insecure org>]

On Fri, Mar 18, 2011 at 01:37:21AM +0200, Toni Ruottu wrote:
>   hello
>
> I am looking at the rpcinfo nse script. Why is it not in the default category?

Good question.  It is already in the "safe" category (not intrusive)
and it produces very useful information.  It is also very fast--taking
well under 1/20 of a second when I scan localhost.  So I just moved it
to "default" as you suggest.  If anyone doesn't think it should be
default, just speak up!

I also updated the NSEDoc to better describe what fields it prints
out.  Users unfamiliar with the rpcinfo program may not understand the
current output very well.  Actually, I think a header line will help
even more than the documentation update, so I just added one.  After
all, my rpcinfo program includes one:

> rpcinfo -p localhost
   program vers proto   port  service
    100000    4   tcp    111  portmapper
    100000    3   tcp    111  portmapper
    100000    2   tcp    111  portmapper
    100000    4   udp    111  portmapper
    100000    3   udp    111  portmapper
    100000    2   udp    111  portmapper
    100024    1   udp  41952  status
    100024    1   tcp  40652  status

Cheers,
Fyodor


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/