Re: [Patch] Re: NMAP XML reports unreadable in linux

[Fyodor <fyodor () insecure org>]

On Thu, Jul 06, 2006 at 11:57:17AM +0200, Eddie Bell wrote:
> Here is a patch against nmap-4.20ALPHA1 that adds a doctype to the xml
> and adds the <distance> tag to the dtd. It now validates.

Thanks.  Do you guys think it is important that we reference a DTD
from the file?  Will it make more applications work with the XML
output?  Or is it likely to cause more trouble than it is worth?  I
guess my concern is that it depends on the DTD existing in
/usr/local/share/nmap/nmap.dtd , which is only true on the machine
Nmap ran on.  And in fact even that isn't ture on Windows or even on
UNIX if the --prefix is changed or the RPM version is installed.  Part
of this could be fixed by using NMAP_DATA_DIR as is done for the
stylesheet.  But that won't help for the "viewd on another machine"
case.  For stylesheets, we offer the --stylesheet and --webxml to move
them.  I suppose we could have --webxml also point to the DTD at
http://www.insecure.org/nmap/data/nmap.dtd .  Though one issue is that
the DTD there is always for the latest version of Nmap and may not
match output produced by someone using an older version.  Still, it
might be better than using a filesystem path even if --webxml isn't
specified.  I don't really know enough about the different ways people
uses these to really judge.

What do you guys think would be best?

Cheers,
-F


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev