Re: First Nmap SOC release! Nmap 4.22SOC1

[kunwon1 <dave.j.moore () gmail com>]

Hi-

On 7/10/07, Dave Moore <dave.j.moore () gmail com> wrote:
> Hi everyone - congrats on another great release. It worked right out
> of the box, with the exception of UMIT:
>
> On 7/8/07, Fyodor <fyodor () insecure org> wrote:
> > Hi Everyone!  I'm happy to put out the first test release with all of
> <snip>
> > o The UMIT graphical Nmap frontend is now included (as an ALPHA TEST
>
> Everything configures and makes just fine, then I try to run UMIT..
>
> kunwon1@kunwon1:~$ rm -r .umit/
> kunwon1@kunwon1:~$ umit
> DEBUG - 2007-07-10 10:58:09,235 - >>> Create user dir at given home:
> /home/kunwon1
> DEBUG - 2007-07-10 10:58:09,237 - >>> Using
> /usr/local/share/umit/config/umit.conf as source
> DEBUG - 2007-07-10 10:58:09,343 - >>> Umit user dir successfully
> created! /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,344 - >>> copy_config_file options.xml to
> /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,345 - >>> copy_config_file
> profile_editor.xml to /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,347 - >>> copy_config_file
> recent_scans.txt to /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,348 - >>> copy_config_file
> scan_profile.usp to /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,350 - >>> copy_config_file target_list.txt
> to /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,351 - >>> copy_config_file umit_version to
> /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,353 - >>> copy_config_file umit.db to
> /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,355 - >>> copy_config_file wizard.xml to
> /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,356 - >>> copy_config_file umit.conf to
> /home/kunwon1/.umit
> DEBUG - 2007-07-10 10:58:09,359 - >>> Using recently created config
> files in user home: /home/kunwon1/.umit/umit.conf
> DEBUG - 2007-07-10 10:58:09,360 - >>> Config file: /home/kunwon1/.umit/umit.conf
> DEBUG - 2007-07-10 10:58:09,599 - Register default_icon icon name for
> file /usr/local/share/pixmaps/default.svg
> DEBUG - 2007-07-10 10:58:09,600 - Register freebsd_icon icon name for
> file /usr/local/share/pixmaps/freebsd.svg
> DEBUG - 2007-07-10 10:58:09,602 - Register irix_icon icon name for
> file /usr/local/share/pixmaps/irix.svg
> DEBUG - 2007-07-10 10:58:09,603 - Register linux_icon icon name for
> file /usr/local/share/pixmaps/linux.svg
> DEBUG - 2007-07-10 10:58:09,604 - Register macosx_icon icon name for
> file /usr/local/share/pixmaps/macosx.svg
> DEBUG - 2007-07-10 10:58:09,605 - Register openbsd_icon icon name for
> file /usr/local/share/pixmaps/openbsd.svg
> DEBUG - 2007-07-10 10:58:09,606 - Register redhat_icon icon name for
> file /usr/local/share/pixmaps/redhat.svg
> DEBUG - 2007-07-10 10:58:09,607 - Register shadow_man_icon icon name
> for file /usr/local/share/pixmaps/shadow_man.svg
> DEBUG - 2007-07-10 10:58:09,608 - Register solaris_icon icon name for
> file /usr/local/share/pixmaps/solaris.svg
> DEBUG - 2007-07-10 10:58:09,610 - Register ubuntu_icon icon name for
> file /usr/local/share/pixmaps/ubuntu.svg
> DEBUG - 2007-07-10 10:58:09,611 - Register unknown_icon icon name for
> file /usr/local/share/pixmaps/unknown.svg
> DEBUG - 2007-07-10 10:58:09,612 - Register win_icon icon name for file
> /usr/local/share/pixmaps/win.svg
> DEBUG - 2007-07-10 10:58:09,613 - Register vl_1_logo icon name for
> file /usr/local/share/pixmaps/vl_1.svg
> DEBUG - 2007-07-10 10:58:09,614 - Register vl_2_logo icon name for
> file /usr/local/share/pixmaps/vl_2.svg
> DEBUG - 2007-07-10 10:58:09,615 - Register vl_3_logo icon name for
> file /usr/local/share/pixmaps/vl_3.svg
> DEBUG - 2007-07-10 10:58:09,615 - Register vl_4_logo icon name for
> file /usr/local/share/pixmaps/vl_4.svg
> DEBUG - 2007-07-10 10:58:09,617 - Register vl_5_logo icon name for
> file /usr/local/share/pixmaps/vl_5.svg
> Traceback (most recent call last):
>   File "/usr/local/bin/umit", line 34, in <module>
>     from umitGUI.App import App
>   File "/usr/local/lib/python2.5/site-packages/umitGUI/App.py", line
> 30, in <module>
>     from umitGUI.MainWindow import MainWindow
>   File "/usr/local/lib/python2.5/site-packages/umitGUI/MainWindow.py",
> line 38, in <module>
>     from umitGUI.ScanNotebook import ScanNotebook, ScanNotebookPage
>   File "/usr/local/lib/python2.5/site-packages/umitGUI/ScanNotebook.py",
> line 35, in <module>
>     from umitGUI.Icons import get_os_icon, get_os_logo, get_vulnerability_logo
>   File "/usr/local/lib/python2.5/site-packages/umitGUI/Icons.py", line
> 101, in <module>
>     pixbuf = gtk.gdk.pixbuf_new_from_file(file)
> gobject.GError: Couldn't recognize the image file format for file
> '/usr/local/share/pixmaps/default.svg'
>
> I did some googling and tried a few things, like installing
> librsvg2-dev, which didn't fix the problem. IANAPP (I am not a python
> programmer) but I looked up the function definition in the PyGTK
> reference for pixbuf_new_from_file, it doesn't seem to have any
> specifications as to which image file formats are acceptable, so I'm
> assuming it's a broken library somewhere or something similar.

Guilherme fixed me up, I had to install librsvg2-common. Looks great,
thanks again

> I'm very much looking forward to trying UMIT, any suggestions would be
> appreciated
>
> Kubuntu 7.04
> Linux kunwon1 2.6.20-16-generic #2 SMP Thu Jun 7 20:19:32 UTC 2007
> i686 GNU/Linux
>
> >   release) with the Nmap tarball distribution.  It isn't yet in the
> >   RPMs or the Windows distributions.  UMIT is written with Python/GTK
> >   and has many huge advantages over NmapFE.  It installs from the Nmap
> >   source tarballs as part of the "make install" process unless you
> >   specify --without-umit to configure.  Please give UMIT a try (the
> >   executable is named umit) and let us know the results!  We hope to
> >   include UMIT in the Windows Nmap distributions soon.
> >
> > o The port selection mechanism was overhauled.  Nmap now knows
> >   (roughly) how common various services are, so you can specify
> >   options such as --top-ports 50 to scan the 50 most popular ports.
> >   You can also use the new --port-ratio option to scan ports above a
> >   given popularity level.  You can also now give the -p option service
> >   names (such as 'http') and wildcards (such as http* to include
> >   services such as https and http-mgmt).  There is also a bracket ([])
> >   operator for scanning all known ports within a given range.  All
> >   these changes, by Doug Hoyte, are described at
> >   http://seclists.org/nmap-dev/2007/q2/0224.html .
> >
> > o Added more Nmap Scripting Engine scripts, bringing the total to 31.
> >   The new ones are bruteTelnet (Eddie Bell), SMTPcommands (Jason
> >   DePriest), iax2Detect (Jason), nbstat (Brandon Enright),
> >   SNMPsysdescr (Thomas Buchanan), HTTPAuth (Thomas), finger (Eddie),
> >   ircServerInfo (Doug Hoyte), and MSSQLm (Thomas Buchanan).
> >
> > o Added the --reason option which explains WHY Nmap assigned a port
> >   status.  For example, a port could be listed as "filtered" because
> >   no response was received, or because an ICMP network unreachable
> >   message was received. [ Eddie ]
> >
> > o Integrated all of your 2nd generation OS detection submissions,
> >   increasing the database size by 68% since 4.21ALPHA4 to 699
> >   fingerprints.  The 2nd generation database is now nearly half (42%)
> >   the size of the original.  Please keep those submissions coming so
> >   that we can do another integration round before the SoC program ends
> >   on August 20!  Thanks to David Fifield for doing most of the
> >   integration work!
> >
> > o Integrated version detection submissions.  The database has grown by
> >   more than 350 signatures since 4.21ALPHA4.  Nmap now has 4,236
> >   signatures for 432 service protocols.  As usual, Doug Hoyte deserves
> >   credit for the integration marathon, which he describes at
> >   http://hcsw.org/blog.pl .
> >
> > o Added the NSE library (nselib) which is a library of useful
> >   functions (which can be implemented in LUA or as loadable C/C++
> >   modules) for use by NSE scripts.  We already have libraries for bit
> >   operations (bit), list operations (listop), URL fetching and
> >   manipulation (url), activation rules (shortport), and miscelaneous
> >   commonly useful functions (stdnse).  Stoiko added the underlying
> >   functionality, though numerous people contributed to the library
> >   routines.
> >
> > o Added --servicedb and --versiondb command-line options which allow
> >   you to specify a custom Nmap services (port to port number translation
> >   and port frequency) file or version detection database. [ David
> >   Fifield ]
> >
> > o The build dependencies were dramatically reduced by removing
> >   unneccessary header includes and moving header includes from .h
> >   files to .cc as well as adding some forward declarations.  This
> >   reduced the number of makefile.dep dependencies from 1469 to 605.
> >   This should make Nmap compilation faster and prevent some
> >   portability problems. [David Fifield]
> >
> > o Upgraded from WinPcap 3.1 to WinPcap 4.01 and fixed a pcap installer
> >   error. [Eddie]
> >
> > o In verbose mode, Nmap now reports where it obtains data files (such as
> >   nmap-services) from. [David Fifield]
> >
> > o Canonicalized a bunch of OS classes, device types, etc. in the OS
> >   detection and version scanning databases so they are named
> >   consistently. [Doug]
> >
> > o If we get a ICMP Protocol Unreachable from a host other than our
> >   target during a port scan, we set the state to 'filtered' rather than
> >   'closed'. This is consistent with how port unreachable errors work for
> >   udp scan. [Kris]
> >
> > o Relocated OSScan warning message (could not find 1 closed and 1 open
> >   port). Now output.cc prints the warning along with a targets OSScan
> >   results. [Eddie]
> >
> > o Fixed a bug which caused port 0 to be improperly used for gen1 OS
> >   detection in some cases when your scan includes port 0 (it isn't
> >   included by default).  Thanks to Sebastian Wolfgarten for the report
> >   and Kris Katterjohn for the fix.
> >
> > o The --iflist table now provides Winpcap device names on
> >   Windows. [Eddie]
> >
> > o The Nmap reference guide (man page) Docbook XML source is now in the
> >   SVN repository at svn://svn.insecure.org/nmap/docs/refguide.xml .
> >
> > o NSE now has garbage collection so that if you forget to close a
> >   socket before exiting a script, it is closed for you. [Stoiko]
> >
> > o The <portused> tag in XML output now provides the open TCP port used
> >   for OS detection as well as the closed TCP and UDP ports which were
> >   reported previously. [Kris]
> >
> > o XML output now has a <times> tag for reporting final time
> >   information which was already printed in normal output in verbose
> >   mode (round trip time, rtt variance, timeout, etc.) [Kris]
> >
> > o Changed the XML output format so that the <extrareasons> tag (part
> >   of Eddie's --reason patch) falls within the <extraports> tag. [Kris]
> >
> > o Nmap now provides more consise OS fingerprints for submission thanks
> >   to better merging. [David Fifield]
> >
> > o A number of changes were made to the Windows build system to handle
> >   version numbers, publisher field, add/remove program support,
> >   etc. [Eddie]
> >
> > o The Nmap -A optionm now enables the traceroute option too [Eddie]
> >
> > o Improved how the Gen1 OS Detection system selects which UDP ports to
> >   send probes to.  [Kris]
> >
> > o Updated nmap-mac-prefixes to latest IEEE data as of 5/18/07. Also
> >   removed some high (greater than 0x80) characters from some company
> >   names because they were causing this error on Windows when Nmap is
> >   compiled in Debug mode:
> >   isctype.c Line 56: Expression: (unsigned)(c + 1) <= 256".
> >   Thanks to Sina Bahram for the initial report and Thomas Buchanan for
> >   tracking down the problem.
> >
> > o Added a SIP (IP phone) probe from Matt Selsky to nmap-service-probes.
> >
> > o Fixed a bug which prevented the NSE scripts directory from appearing
> >   in the Win32 .zip version of Nmap.
> >
> > o Fixed a bug in Traceroute's output.  It occured when a traced host could
> >   be fully consolidated, but only the first hop number was outputted. [Kris]
> >
> > o The new "rnd" option to -D allows you to ask Nmap to generate random
> >   decoy IPs rather having to specify them all yourself. [Kris]
> >
> > o Fixed a Traceroute bug relating to scanning through the localhost
> >   interface on Windows (which previously caused a crash).  Thanks to
> >   Alan Jones for the report and Eddie Bell for the fix.
> >
> > o Fixed a traceroute bug related to tracing between interfaces of a
> >   multi-homed host.  Thanks to David Fifield for reporting the problem
> >   and Eddie Bell for the fix.
> >
> > o Service detection (-sV) and OS detection (-O) are now (rightfully)
> >   disabled when used with the IPProto Scan (-sO).  Using the Service
> >   Scan like this led to premature exiting, and the OS Scan led to gross
> >   inaccuracies.  [Kris]
> >
> > o Updated IANA assignment IP list for random IP (-iR) generation. [Kris]
> >
> >
> > Enjoy!
> > -Fyodor
> >
> >
> > _______________________________________________
> > Sent through the nmap-dev mailing list
> > http://cgi.insecure.org/mailman/listinfo/nmap-dev
> > Archived at http://SecLists.Org
>
>
> --
> ==========
> A human being should be able to change a diaper, plan an invasion,
> butcher a hog, conn a ship, design a building, write a sonnet, balance
> accounts, build a wall, set a bone, comfort the dying, take orders,
> give orders, cooperate, act alone, solve equations, analyze a new
> problem, pitch manure, program a computer, cook a tasty meal, fight
> efficiently, die gallantly. Specialization is for insects. -Heinlein
>
> This message copyright (c) 2004-2007 David J Moore


-- 
==========
A human being should be able to change a diaper, plan an invasion,
butcher a hog, conn a ship, design a building, write a sonnet, balance
accounts, build a wall, set a bone, comfort the dying, take orders,
give orders, cooperate, act alone, solve equations, analyze a new
problem, pitch manure, program a computer, cook a tasty meal, fight
efficiently, die gallantly. Specialization is for insects. -Heinlein

This message copyright (c) 2004-2007 David J Moore

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org