Nmap Development mailing list archives

Re: [NSE] Dropbox LanSync host collection


From: Kris Katterjohn <katterjohn () gmail com>
Date: Tue, 14 Dec 2010 11:54:37 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/14/2010 11:37 AM, David Fifield wrote:
Currently several prerule scripts are being run with --script=safe. It's
already slightly annoying and unexpected to see, for example, DNS-SD
results fo the local LAN when running "nmap --script=safe scanme.nmap.org".
This script, with its 20-second timeout, will add 20 seconds to those
scans.

Any ideas about solving this? We already mitigated the problem by taking
these types of broadcast scripts out of default. Myabe they should run
only when specifically requested by name?


Recall we all ready have the separate arg "newtargets" for scripts adding
targets to Nmap's scanning queue.  Maybe for consistency we could add a
"broadcast" arg to allow scripts like this to run?  I don't remember this
being brought up before, but I could have missed it.

Otherwise, only running them when called by name sounds like a good enough
alternative.

David Fifield

Cheers,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=PFu6
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: