diff --git a/CHANGELOG b/CHANGELOG index 073a3e9c8..0ee14763f 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,12 @@ # Nmap Changelog ($Id$); -*-text-*- +o For some UDP ports, Nmap will now send a protocol-specific payload + that is more likely to get a response than an empty packet is. This + improves the effectiveness of probes to those ports for host + discovery, and also makes an open port more likely to be classified + open rather than open|filtered. The ports and payloads are defined + in payload.cc. [David] + o Fixed two memory leaks in ncat_posix.c and a bug where an open file was not being closed in libdnet-stripped/src/intf.c [Josh Marlow] diff --git a/payload.cc b/payload.cc index ae2ba4f6e..a8290a3c7 100644 --- a/payload.cc +++ b/payload.cc @@ -103,6 +103,10 @@ extern NmapOps o; s = eval('"' + raw_input().replace('"', '\\"') + '"') print '"' + "".join(c.isalnum() and c or "\\%03o" % ord(c) for c in s) + '"' + + These payloads are sent with every host discovery or port scan probe. Only + include payloads that are unlikely to crash services, trip IDS alerts, or + change state on the server. */ static const char payload_DNSStatusRequest[] =