Re: Draft for hosted cgi

["Louis Nyffenegger" <louis.nyffenegger () gmail com>]

If Apache invoke Nmap, there will be right problems or security problems.

Why store the result in a xml file ? Why not use the database ?

An another question : Nobody works on ncat and nping soc ?

Louis

On 5/25/06, Julien Delange <julien.delange () gmail com> wrote:
> 2006/5/25, Arturo 'Buanzo' Busleiman <buanzo () buanzo com ar>:
> > I don't see how that is not possible. Please, tell me. We may work out a
> > new approach. And I've
> > promised Fyodor I'll help you in everything I can :)
>
>
>
>
> In fact, if apache invokes nmap directly, it hangs the apache thread or
> process. The web-browser of the user will hang and will wait for the scan.
> It's probably not what we expect. If you make N scans at the same time, you
> will get N threads/processes waiting for the nmap process. It is a very bad
> idea and is not optimized. More, if apache launches the scans, how does it
> know if he has scheduled scans to perform ?
>
> With the daemon, it makes requests on the database every 10 seconds (for
> example) to know if it has to perform scans. He make forks() and launch one
> scan per fork(), and finally store the results in an XML file. It's simple,
> clean and efficient.
>
>
> If you use any IM, let me know.
>
>
> Yeah, I use jabber (julien () gunnm org), but I don't use it very often.
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev


-- 

There is no patch for human stupidity

--


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev