Re: [NSE] New scripts vuze-dht-info, vuze-find-nodes

[Toni Ruottu <toni.ruottu () iki fi>]

  Gorjan,

Do you have any idea how this is supposed to work? Did you consider
adding support for vuze dht to the bittorrent library? Do you think it
would make sense to add the support now, that we have a vuze library?

> > By looking at the code I get the picture that vuze-find-nodes attempts
> > to extract information about any connected nodes by trying out random
> > IDs. The bittorrent library does not work like this. Instead it lets
> > the user provide an ID as a magnet link or torrent file and uses the
> > ID to query the DHT. So the bittorrent library lacks support for
> > extracting node information by brute force, where as this script
> > doesn't support scans on specific IDs. I'll leave it up for discussion
> > which one we need, or if we should have both. I am a bit worried that
> > supporting one way for bittorrent dht, and another way for vuze dht
> > may confuse users.
>
> To be honest, I don't understand all of this protocol or how it is ment to
> work, but as far as I can tell several consecutive requests with the
> vuze-find-nodes script gets the same list of nodes.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/