diff --git a/todo/nmap.txt b/todo/nmap.txt index ecaad66eb..49769d559 100644 --- a/todo/nmap.txt +++ b/todo/nmap.txt @@ -5,13 +5,6 @@ o Investigate/fix potential routing-related issue. See emails from http://seclists.org/nmap-dev/2012/q3/4, http://seclists.org/nmap-dev/2012/q2/449 -o Even without the --osscan-guess flag, Nmap should show the closest - matches (if they pass our threshold) in the XML output. We omit - them from the normal output in large part to encourage people to - submit fingerprints, but that argument doesn't apply so well to XML - output users. Normal output users who really want to see the Nmap - guesses could still use --osscan-guess as before. - o Clean up the Nmap repo to remove some bloat we've allowed to creep in. Should do a more thorough search, but for now here are two obvious candidates: @@ -53,6 +46,15 @@ o Add CPE entries to OS fingerpting DB entries which still lack them o Do an Nmap dev release. Last release was Nmap 6.01 June 22. +o Update more web content in real time (or near real-time, or at least + on an automated basis rather than requiring manual checkin and + update). In particular: + o NSEDoc generation + o [done] SVN dir (http://nmap.org/svn/) should be removed and a redirect + added to https svn server. + o Maybe Nmap book building + o Maybe the generated files in nmap.org/data/ + o Migrate web.insecure.org to a RHEL-6 derived distro (probably CENTOS 6, since Linode doesn't currently offer ScientificLinux images). o Maybe start with svn server, since we've had reports of our @@ -125,15 +127,6 @@ o Test a hierarchical classifier for IPv6 OS detection. Our classifier suspect playing it by ear will be sufficient. Talk to David for more of his thinking on this topic. -o Update more web content in real time (or near real-time, or at least - on an automated basis rather than requiring manual checkin and - update). In particular: - o NSEDoc generation - o SVN dir (http://nmap.org/svn/) should be removed and a redirect - added to https svn server. - o Maybe Nmap book building - o Maybe the generated files in nmap.org/data/ - o If it is trivial to add, it would be nice if the "New VA Module Alert Service" also gave the Author field for NSE scripts so everyone knows which hero(es) wrote it. @@ -738,6 +731,13 @@ o random tip database DONE: +o Even without the --osscan-guess flag, Nmap should show the closest + matches (if they pass our threshold) in the XML output. We omit + them from the normal output in large part to encourage people to + submit fingerprints, but that argument doesn't apply so well to XML + output users. Normal output users who really want to see the Nmap + guesses could still use --osscan-guess as before. + o Change the interface of nmap.ip_send to take an explicit destination address. It currently extracts the destination from the packet buffer, which does not have enough information to