fyodor
|
6c06f51bd7
|
merge soc07 r5100 - Changing fprintf(stderr, )'s to error()'s (or fatal() if followed by and exit()). Besides providing consistency, this also allows more errors to actually be logged with --log-errors.
|
2007-08-11 05:16:56 +00:00 |
|
fyodor
|
8dc9673928
|
merge soc07 r5085 - Changing bare printf()s to log_write(LOG_PLAIN,)s because these were always printed even when things like XML and greppable output were sent to stdout (e.g. -oX -). This also adds o.scriptTrace() to make --script-trace behave more like --packet-trace and --version-trace. Nsock tracing was done unconditionally in NSE, and that has been changed to only be done when o.scriptTrace() is true.
|
2007-08-11 05:13:16 +00:00 |
|
fyodor
|
0c123a1056
|
merge soc07 r4918 - changing a couple more hardcoded function names
|
2007-08-11 04:21:22 +00:00 |
|
fyodor
|
f2e0ddb40a
|
merge soc07 r4916 - If we get a ICMP Protocol Unreachable from a host other than our target, we set the state to 'filtered' rather than 'closed'. Now it works like Port Unreachables and UDP.
|
2007-08-11 04:20:48 +00:00 |
|
fyodor
|
8d74bbcd8a
|
merge soc07 r4871:4884 and r4888 - renaming __FUNCTION__ to __func__ and changing hardcoded func names to __func__
|
2007-08-11 04:06:09 +00:00 |
|
fyodor
|
47dd05d4d9
|
merge soc07 r4866 - Fix reason reporting again. I accidentally broke it in r4862 while fixing a memory allocation error. Now the memory error is fixed and reasons work again.
|
2007-08-11 04:01:05 +00:00 |
|
fyodor
|
87840c36de
|
merge soc07 r4862 - Rearrange some reason-setting code to avoid using deallocated memory.
|
2007-08-11 03:59:45 +00:00 |
|
fyodor
|
58522c59f6
|
merge soc07 r4822 - Reduce the number of build dependencies.
|
2007-08-11 03:35:46 +00:00 |
|
fyodor
|
58f46706e5
|
merge soc07 r4751 - UDP traceroute hop distance and port state reason feature
|
2007-08-11 03:15:24 +00:00 |
|
kris
|
aff1d727ef
|
Merging in r4769:4773 from /nmap-exp/soc07/nmap
|
2007-05-23 22:51:25 +00:00 |
|
kris
|
c0bb3fa376
|
Just removing a few empty private access specifiers ('private:' is there, but it's not specifying anything)
|
2007-02-04 01:07:36 +00:00 |
|
kris
|
395b4d2150
|
Staying on the safe side when matching TCP flags on one part in scan_engine.cc. Instead of testing th_flags == TH_SYN|TH_ACK, it tests if (th_flags & TH_SYN|TH_ACK) == TH_SYN|TH_ACK. It's looks like it's done 'correctly' everywhere else. I can't really think of a real situation where we'd recieve any extra flags when doing a SYN scan, but we could (and it's better than having a false negative anyway).
|
2007-02-03 04:15:18 +00:00 |
|
kris
|
7d778b51c9
|
Just fixing a couple typos in comments in scan_engine.cc
|
2007-02-03 03:57:35 +00:00 |
|
kris
|
5036877865
|
Remove some duplication in get_pcap_result() in scan_engine.cc. probe->protocol() is all ready checked against ip2->ip_p earlier (the two I'm removing indirectly check against ip2->ip_p: look at the removed part and what ip2->ip_p is tested against in the surrounding if()s). Then a little lower in the function, that whole if() block can be removed because it's the same as what's done in that switch() block. The same error() and hdump() are used in the default case. I could've kept the if(), but this keeps is simple.
|
2007-02-02 02:33:20 +00:00 |
|
kris
|
76c8efc086
|
Removing the IPIP header sending with -sO from r4403. This turned out to be less useful than I originally found it to be.
|
2007-01-29 18:02:28 +00:00 |
|
kris
|
c2427f32d3
|
Fixed IPProto Scan on localhost when using --data-length to add at least 8 bytes of data. There is a check to see if the packet is at least 28 bytes long (IP header and 8 bytes of data), and if it's at least that big it's considered good. So if the protocol matches, it's considered open. The problem was we didn't check for our own probes, so if we scan localhost with --data-length >=8, everything was labeled open.
|
2007-01-28 02:25:27 +00:00 |
|
kris
|
6d4ef2aa7e
|
Fix the IPProto scan for UDP. Now we check for ICMP Port Unreachable and call it open if we get one. This was coming up open|filtered, and sometimes filtered before.
|
2007-01-27 20:09:14 +00:00 |
|
kris
|
1e3760a397
|
Start sending a valid encapsulated header with IP-in-IP with -sO. Hosts respond more when a valid header is sent. I kept getting open|filtered for this, and now I get open. It's a lot like my IGMP patch from r4361
|
2007-01-27 04:36:24 +00:00 |
|
kris
|
69754e8311
|
Use dnet headers for TCP and UDP. This allows us to remove netinet tcp.h and udp.h references, the udphdr_bsd stuff, and the TH_ECE/TH_CWR #defines in tcpip.h. That was easy, but we (Fyodor and I) came to the conclusion that IP and ICMP aren't worth the hassle to switch (I was testing TCP, UDP and IP in my branch). The struct icmp_hdr in dnet isn't setup anything like what we're using now. Then, struct ip_hdr uses ip_addr_t (typedef'd to uint32_t in that ip.h) instead of struct in_addr for the IP addresses, and that would require some dnet modifying to work right. We might be able to come up with some elegant solution for IP, but probably not for ICMP. For now, they're still left up to netinet (or tcpip.h).
|
2007-01-23 05:29:59 +00:00 |
|
kris
|
24e30769e8
|
Merging my UDP localhost patch. It fixes the UDP scan on localhost picking up it's own port. It also fixes the TCP one so that it doesn't print a message (with -d) about receiving a response with unexpected flags (like getting a SYN for a SYN scan because it's our port). The problem was that the IP ID wasn't ntohs()'d while checking for this, so we still saw our port on UDP. I simply copied this to the TCP part to avoid the message.
|
2007-01-20 22:15:49 +00:00 |
|
kris
|
9ff574d50e
|
Merging my IGMP -sO patch. This adds build_igmp_raw() to easily build IGMP packets and uses it for -sO. Systems respond more when these packets are sent with an actual IGMP header. The RFC says they MUST verify the checksum, so that's most likely why I always got open|filtered instead of open. Since the different IGMP types all seem to have the checksum in the same place in the packet, it should at least tell us if it's supported or not even if the rest of the header is bogus (because the rest of the header has changed a little bit between the versions).
|
2007-01-17 17:40:16 +00:00 |
|
fyodor
|
47036bc063
|
clean patches by Kris: remove c++ comments in nmapfe and nsock, and remove superscan prototype from scan_engine.h
|
2007-01-01 00:23:29 +00:00 |
|
fyodor
|
508e674ce4
|
fix Mac OS X pcap problem, I hope
|
2006-11-19 09:35:26 +00:00 |
|
fyodor
|
9cbae88f44
|
Add -ip-options support
|
2006-08-29 03:26:00 +00:00 |
|
fyodor
|
b28d51167c
|
Minor source code header improvements
|
2006-08-25 01:47:49 +00:00 |
|
fyodor
|
a403864351
|
Replace file headers, mostly to update copyright to 2006
|
2006-08-24 04:43:50 +00:00 |
|
fyodor
|
b5c6d48c87
|
fix minor compilation bug and unused variable
|
2006-07-04 23:23:03 +00:00 |
|
fyodor
|
9c0af0a95b
|
memory releasing patch from Marek
|
2006-07-04 23:04:56 +00:00 |
|
fyodor
|
d3055b26bf
|
Some patches from Marek
|
2006-07-04 08:00:11 +00:00 |
|
fyodor
|
56384d8770
|
About to release 4.20SOC-ALPHA1
|
2006-06-25 02:02:14 +00:00 |
|
fyodor
|
5a9fea3b39
|
portability fixes, fixed UDP phantom port bug, fixed --version-intensity crash, changed mass_dns to give warning rather than error if cannot find dns servers
|
2006-06-10 21:23:27 +00:00 |
|
fyodor
|
90d9ceaefa
|
Added Martin Macok ratelimit patch with minor changes
|
2006-05-15 22:37:31 +00:00 |
|
fyodor
|
37fac543b5
|
Majek's Portlist change patch
|
2006-05-14 05:00:58 +00:00 |
|
fyodor
|
1c5f438be0
|
fix a bug related to status reporting during dns
|
2006-05-05 00:43:29 +00:00 |
|
fyodor
|
0b33f41633
|
About to do Nmap 4.03
|
2006-04-22 23:00:09 +00:00 |
|
fyodor
|
7fafddee53
|
latest changes ...
|
2006-03-25 23:56:48 +00:00 |
|
fyodor
|
86089c4255
|
Renamed tty.cc/.h to nmap_tty.cc/.h
|
2006-03-06 00:15:49 +00:00 |
|
fyodor
|
76ab1500b3
|
make a ton of global symbols static
|
2006-03-05 23:59:46 +00:00 |
|
fyodor
|
7224f4a52d
|
patch by Kris Katterjohn to Amiga system to use atexit rather than some macro hack
|
2006-03-05 21:31:04 +00:00 |
|
fyodor
|
848ad2a96a
|
Nmap 4.02Alpha1 release for Everdream
|
2006-03-03 23:12:14 +00:00 |
|
fyodor
|
c9dd83e327
|
about to apply Doug DNS fix patch
|
2006-02-07 07:15:32 +00:00 |
|
fyodor
|
ccce12128f
|
Just added Paul's status patch
|
2005-12-31 00:32:42 +00:00 |
|
fyodor
|
d8ce1cfe41
|
about to work on a bug that kx reported
|
2005-12-28 08:58:56 +00:00 |
|
fyodor
|
1655d26bd8
|
about ready for 3.95 release
|
2005-12-08 08:10:49 +00:00 |
|
fyodor
|
a63916c182
|
about to apply gtk2 patch
|
2005-12-06 21:15:45 +00:00 |
|
fyodor
|
4cebcf6824
|
probably about to release Nmap 3.94ALPHA2
|
2005-12-05 01:00:03 +00:00 |
|
fyodor
|
b3b937d2ca
|
Nmap Diet program to reduce memory footprint -- still testing but things seem to be working
|
2005-12-04 12:21:44 +00:00 |
|
fyodor
|
98ab4df168
|
fix icmp type/code 3/0 response handling to port scans (port is filtered)
|
2005-12-03 04:41:02 +00:00 |
|
fyodor
|
374b6c9a82
|
soon to go to wtci
|
2005-10-23 02:18:04 +00:00 |
|
fyodor
|
d187c68017
|
blah
|
2005-10-01 23:50:27 +00:00 |
|