Re: Qscan in NSE: qscan.nse

[Arturo 'Buanzo' Busleiman <buanzo () buanzo com ar>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Ron wrote:
> As an enhancement to the whole concept, how difficult would it be to integrate some OS-detection-style [...]
> Gather those stats, group the hosts that *might* be the same, then do the timing tests on the sub-groups. 

I used to QSCAN first, then nmap -O each groupped set of ports.

- --
Arturo "Buanzo" Busleiman
Independent Linux and Security Consultant - OWASP - SANS - OISSG
http://www.buanzo.com.ar/pro/eng.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEAREKAAYFAkuorCUACgkQAlpOsGhXcE3DKACfdowuLvx6xeiVGg6rpo3ntJOw
wUAAn05OE9gEU7jLTRRJuh/REXAqfiYp
=3d4s
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/