Nmap Development mailing list archives

Re: Api for nmap


From: Jason Gerfen <jason.gerfen () gmail com>
Date: Mon, 9 Feb 2015 12:57:07 -0700

On Mon, Feb 9, 2015 at 12:50 PM, Daniel Miller <bonsaiviking () gmail com>
wrote:

Pro, you are welcome to code whatever you want in Java, but it will not be
"Nmap", and you will run into trouble if you try to use the Nmap name to
market it. Feel free to check out our source code and use it as a reference
point, but be aware that even "basic code like port scanning" is some of
the most complicated stuff in our codebase, and has been subject to decades
of real-world testing and improvement. Just ask Jacek, who spent last
summer updating our TCP Connect scan engine to use Nsock. He was trying to
make an Nmap function use an Nmap-developed library that is already in use
in other parts of Nmap, and still ran into difficulty replicating the
timing algorithms necessary to get good performance.

Jason, your suggestion is certainly more feasible, but I'm not sure that
we are motivated to encourage something like that. I know that personally I
would want to see a really good argument for such a feature, including use
cases that illustrate why Nmap's current interface (command line arguments
and XML output) are insufficient.

Dan


​Dan,

I for do not condone it, nor do I find it entirely necessary as the current
tool is stable and very usable as is.

The only reason I could see this as being a benefit is regarding a UI in
Windows, OSX, Gnome, KDE or other window manager. Having a linkable object
of library(s) is the only edge case I can see a benefit for this
functionality. Well there is the case for node.js as a native C/C++ module
implementation using GYP but that is well outside the scope of this
conversation.​



On Mon, Feb 9, 2015 at 6:02 AM, Jason Gerfen <jason.gerfen () gmail com>
wrote:

Why not simply change the current library to a shared object as there
allowing for an API using the existing functions. Save a bit of time IMHO.

On Mon, Feb 9, 2015 at 4:51 AM, Pro Gupta <pchemistry.35 () gmail com>
wrote:

Is it feasible , I would start with only the basic code like port
scanning etc...


On Mon, Feb 9, 2015 at 4:53 PM, Jacek Wielemborek <d33tah () gmail com>
wrote:
W dniu 09.02.2015 o 12:18, Pro Gupta pisze:
As only c/c++ code is present in current nmap libraries, so I was
proposing for building a collection of libraries directly in java with
the original flavours of core nmap like ultra_scan algorithm etc which
could be used for building java based applications without using any
native codes as in android etc.


So you're basically proposing a rewrite of Nmap to Java?

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/



_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/



_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: