Nmap Development mailing list archives

[Zenmap-Patch] Reducing Topology Noise


From: Jay Bosamiya <jaybosamiya () gmail com>
Date: Sat, 21 Jun 2014 15:47:34 +0530

Hi All!

I've been working on reducing Zenmap's Topology view to reduce noise due
to anonymous hops.

Basically what it does is this:
         / anon_1 \
..-> ip_a          ip_b -> ..  => .. -> ip_a -> anon -> ip_b -> ..
         \ anon_2 /

A big thanks to Anders Sundman for sending in a patch [1] that tried to
do this. Your patch helped a lot though it only solved part of the
problem (worked with only single anonymous hops in parallel).

The current patch can also handle things like:
        / anon_1 -> anon_2 \
..->ip_a                    ip_b->.. => .. ->ip_a -> anon -> ip_b->..
        \ anon_3 -> anon_4 /

Attached is the patch. Also attached is a zip file containing XMLs to
test with (traceroutes with anonymous hops in different combinations).


There are a few cases that we need to think about, however, namely
"anon_hops_at_known.xml" or "hop_split.xml" (from the zip file attached).


For "anon_hops_at_know.xml", I think that the anonymous hop should be
removed completely (since 1.1.1.2 fits perfectly instead of the anon).
I think that it should work like:
         / anon_1 \
..-> ip_a          ip_c -> ..  => .. -> ip_a -> ip_b -> ip_c -> ..
         \  ip_b  /


For "hop_split.xml", I am not sure what should be done. Currently, it
works like:
         / anon_1 -> ip_b -> ..
..-> ip_a
         \ anon_2 -> ip_c -> ..

but I think it would be better if it became:
                 / ip_b -> ..
..-> ip_a -> anon
                 \ ip_c -> ..


I have not implemented the 2 changes since I wanted some feedback before
I did so.

Cheers,
Jay

Attachment: noiseRemoval.patch
Description:

Attachment: testXMLfiles.zip
Description:

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: