Re: [PATCH] Always list SSL in case any SSL connection succeeded

[Fyodor <fyodor () insecure org>]

On Mon, Mar 02, 2009 at 09:01:05AM -0700, David Fifield wrote:
> On Tue, Feb 24, 2009 at 10:34:59PM +0100, Kristof Boeynaems wrote:
> > Kristof Boeynaems wrote:
> > > David Fifield wrote:
>
> PORT   STATE SERVICE   VERSION
> 80/tcp open  ssl/http?
>
> PORT     STATE SERVICE      VERSION
> 4433/tcp open  ssl/unknown?
>
> Though you can also make a case for "ssl/unknown" in the second case.

I agree that we can make a case for removing the '?' in the second
case.  After all, I think we generally make a special case to omit the
'?' after "unknown" in version detection.  And, if I understand
correctly, we're reasonably sure of the ssl part because we've
successfully made an SSL connection at this point.

Cheers,
-F


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org