Nmap Development mailing list archives

Re: [RFC] Basing timeouts in NSE on host.times.timeout


From: nnposter () users sourceforge net
Date: Fri, 1 Aug 2014 17:22:25 +0000

Daniel Miller wrote: 
Adding a few seconds makes sense, especially in some special cases where
some host-processing time may be required (e.g. UDP packet sent, target
processes for X seconds, target sends UDP response). It is ultimately up to
the script author.

FWIW, for telnet-brute to run efficiently I had to expose the timeout
as an optional script parameter. I have found that there is substantial
variablity in response latency across telnet implementations and
different phases of the login flow. Put differently, this script is not
suitable for any fixed value or even value heuristically derived from
the port-scan phase.

Cheers,
nnposter
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: