Re: Quake 3 query script submission

[Fyodor <fyodor () insecure org>]

On Sat, Jan 16, 2010 at 04:02:57PM -0600, Mak Kolybabi wrote:
> I'd like to submit a script I've written that interacts with servers for several
> Quake3-derived games. It does this by first querying several known master
> servers and recording the listed IPs and their registered listening ports. For
> each scanned host, it then checks the host-to-port mapping to see if any game
> servers have been publicized. If so, it sends them a standard query to return
> their version and all of their settings and current users.

Nice work, Mak!  Have you thought about dropping the MASTERS list and
always querying the open ports on target machines directly?  If Nmap
version detection does not detect these games, perhaps a new probe and
match lines (see http://nmap.org/book/vscan.html) are in order to do
so.  And once the service is detected, unless I'm missing something (I
only did a quick browse of the script) you should be able to query it
with your query() function in the way you do now.  That is the
approach Nmap takes in similar cases, and it avoids having millions of
Nmap users bang on ghdigital.com and other 3rd party servers.

Cheers,
-F
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/