Re: [NSE] rpc.lua Portmapper list cached in the NSE registry

[Patrik Karlsson <patrik () cqure net>]

Hi Djalal,

Reading the last line of the PIL documentation makes me wonder if this will actually work as intended [1].
I had some similar problems with my AFP implementation [2].
As far as I can tell the data won't be collected as long as the key is  a number, boolean or string.

Patrick, could you please shed some light on this?

//Patrik

[1] http://www.lua.org/pil/17.html
[2] http://seclists.org/nmap-dev/2010/q1/461

On 15 maj 2010, at 02.17, Djalal Harouni wrote:

> On 2010-04-30 12:13:03 +0200, Patrik Karlsson wrote:
> > Hi Djalal,
> >
> > I tested the patch against a Linux server running NFS and it works great.
> > My virtual OS X server behaves as badly as last time, so I don't think it makes a good reference.
> > If someone else has the possibility to try this patch out against OS X please let us know.
> >
> > I'm uncertain about the memory implications of storing the rpcinfo table in the registry.
> > I guess if you scan a Class B-network and identify 1000's of hosts running RPC it could become a problem.
> > Cleaning up manually will probably be a problem as the script does not know if it is the last to use the cached data 
> > or not.
> > So, a weak keyed table, suggested by Patrick, is probably the best bet.
> Hi Patrik,
>
> Attached is a new patch to cache the RPC list in the NSE registry. I
> have used weak tables with weak values, so when running rpcinfo and nfs-* scripts they will send only tree RPC DUMP 
> CALLS packets instead of +40 packets. I assume that the cached data has been collected twice by the garbage collector.
>
> -- 
> tixxdz
> <rpc.lua.diff>_______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/

--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77





_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/