Nmap Development mailing list archives

Re: non existent script called with --script=all


From: Kris Katterjohn <katterjohn () gmail com>
Date: Mon, 27 Apr 2009 17:18:02 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Fyodor wrote:
On Mon, Apr 27, 2009 at 08:18:43AM -0500, Ron wrote:
Fyodor wrote:
My thought is, if it's generated on the fly, you wouldn't ever need to
write to the file. That would solve all your issues. The downside, I
suppose, is that it wouldn't be scalable.

Yeah, the whole point of the file is to avoid the overhead of reading
every script and generating a category table each time.  But maybe
that is an over-optimization.  If anyone wants to make a patch which
does it all fly, and then benchmarks that version to determine the
computation time differences with and without script.db, that would be
great!  It is important to test it with 1,000+ scripts though.  NSE
only comes with 56 scripts now, but it continues to grow.  You could
create such a large number of scripts by taking about 20
differently-named copies of each of our current scripts.  That way you
still have some diversity compared to 1,000 copies of the same trivial
script.  Or I suppose 1,000 copies of one of our more complex scripts
might be OK for testing.

If doing category generation on the fly with 1,000+ scripts does not
materially increase computation time, I'd support eliminating
script.db and doing that.


When I suggested this very same idea over a year ago (when it was shot down by
you and Brandon), you said that Diman had already tested with many scripts:

http://seclists.org/nmap-dev/2008/q1/0514.html

(and http://seclists.org/nmap-dev/2008/q1/0513.html is Brandon's detailed reply)

Cheers,
-F


Thanks,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=IK9Z
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: