Re: [PATCH] nmap-service-probes: Misc database corrections, printer additions

[Fyodor <fyodor () insecure org>]

On Sat, Feb 28, 2009 at 01:22:40AM +0000, Brandon Enright wrote:
> My current thinking is that we will make a few different probes, a PJL,
> a PCL, a XEX, and a IPDS.  I haven't started on IPDS but here is the
> spec:

The printer port version detection work is great!  But remember that
for version detection, every new probe adds extra time to the VD
process for non-matching services.  So if we can get the same results
from just one probe, that is preferable.  Still, it is definitely
worth testing multiple probes to determine which one works best.  And
it may turn out that we do need multiple probes to catch everything.
But if we can avoid that, we should.  If we have to have multiple
probes, things like the rarity value and well-set probable ports
fields can help.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org