Nmap Development mailing list archives

Re: Nmap 4.60 released


From: Fyodor <fyodor () insecure org>
Date: Thu, 20 Mar 2008 17:53:44 -0700

On Fri, Mar 21, 2008 at 12:48:58AM +0000, Brandon Enright wrote:

I've used qscan to test the effects of traffic classification rules on
a L7 protocol analyzing load balancer (Packeteer packet shaper
product).

I was using hping2 to gather stats for different ports to infer the
effects of different classification rules but even minor changes were
tedious to measure the effects of.  Qscan automated the whole
measurement portion of the process.

One change I'd like to see to qscan is that it become another option
like traceroute rather than its own scan.  I'd like to be able to run
discovery and standard port scanning and then at the end, have qscan
run to lump the ports into buckets.  I don't believe this would
sacrifice any power or flexibility and would make qscan integrate into
Nmap as though it were just another --feature rather than a completly
different mode.

Thanks for your comments.  Maybe it would make a good NSE script now
that we have pcap and raw IP functionality built in.  It would
certainly be interesting to see whether NSE is performant enough to
handle this task which requires very accurate timing.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: