david
c3fcd8ca9d
In nmap-os-db, change GCD=<7 to GCD=1-5. The "<7" value was meant to encompass
...
small multiples of 1 when a GCD of 1 was observed. But 0 should be excluded
because a GCD of 0 indicates constant sequence numbers, while a GCD of 1 is
usually a sign of a good sequence number generation algorithm. I lowered the
maximum value in the range from 6 to 5 because the fingerfix utility expands
other GCDs up to a multiple of 5.
2009-02-25 18:01:50 +00:00
david
6a6d18df6f
Fix a bug in the printing of OS fingerprints. When a perfect match was found,
...
the value of the SEQ.G test (print suitable for submission) was the opposite of
what it should have been. This doesn't matter much because in the case of a
perfect match the submission URL isn't shown and the print itself is not
normally displayed. We want perfect matches with the new SEQ.CI test and the
online submitter will reject them if G=N.
2009-02-25 17:44:37 +00:00
doug
85f4cb66e2
Fixed issue with RPM Print Manager match line
2009-02-25 01:44:41 +00:00
bmenrigh
f74f2f05d7
Cast a double seconds into time_t to eliminate a compiler warning that was showing up for my x86_64 box.
2009-02-25 01:27:35 +00:00
david
aa97b79e4c
Fix a little error in a comment: We decided to call the closed-port TCP IP ID
...
test CI, not CTI.
2009-02-25 00:40:47 +00:00
david
8827e6778a
Document SEQ.CI in CHANGELOG. Add it to nmap-os-db with MatchPoints of 0, not
...
that it matters because there are no prints that have it yet.
2009-02-25 00:37:21 +00:00
david
b230f7168c
Merge from /nmap-exp/david/nmap-closed-ipid.
...
This adds a new SEQ.CI OS detection test. It is based on the IP IDs of the
responses to the three probes sent to a closed port: T5, T6, and T7. This has
been reported to differ from TI and was observed to do so in Internet scans
using the nmap-closed-ipid branch.
2009-02-25 00:30:40 +00:00
david
588d629a6a
Copy the Subversion properties from osscan.cc to osscan2.cc. None were set on
...
osscan2.cc. I think osscan2.cc wasn't updating its $Id$ because it didn't have
the svn:keywords property set.
2009-02-24 22:04:54 +00:00
david
f5fb0fd691
Try fixing the $Id: $ line in osscan2.cc. It's not updating itself, perhaps
...
because it had the file name osscan.cc inside it.
2009-02-24 21:58:34 +00:00
david
ade608c766
Factor out a couple of essentially identical switch statements that filled in
...
the TCP/ICMP IP ID sequence generation class.
2009-02-24 21:53:40 +00:00
david
f9f928e9ce
OS fingerprints now include the SEQ.II test (ICMP IP ID sequence
...
generation) even if there are no other SEQ test results. Try it with
"nmap -O -d -p 113 scanme.nmap.org". Now you get SEQ(II=I) instead of no
SEQ line at all.
2009-02-24 21:08:38 +00:00
fyodor
9ede137210
rename crc16 function in nbase to crc32, as that seems to be what it actually is. Also change osscan2.cc to call it by the new name. Thsi fix was suggested by Marc Bevand
2009-02-24 02:01:03 +00:00
fyodor
fac0dacfda
changes after talking to David and also note a new OS detection issue
2009-02-24 01:44:44 +00:00
fyodor
f1d8f94920
sorting, plus fixed a couple likely bugs in the file. A Sun Solaris 2.6 signature was missing a % separater between fields in T6 and T7, and a 3Com SuperStack 3 Switch 4400 SE signature had an empty SEQ.GCD (I am not sure if this is OK or not, so I just deleted it). Thanks to Marc Bevand for spotting the flaws
2009-02-24 01:27:33 +00:00
david
0970e3c255
Add to CHANGELOG:
...
o [NSE] A new function stdnse.sleep allows a script to sleep for a
given time (and yield control to other scripts). [David]
2009-02-24 00:28:35 +00:00
david
486ff13e3a
Add the --stats-every option. See http://seclists.org/nmap-dev/2009/q1/0404.html .
2009-02-24 00:23:54 +00:00
david
a173fe6ce1
Add the stdnse.sleep function.
2009-02-23 23:57:39 +00:00
david
b819aa7f25
Document half-open and full-open IPv4 octet ranges.
2009-02-23 21:21:36 +00:00
david
5d2393d115
Add to CHANGELOG:
...
o [Ncat] The syntax accepted by the --allow, --deny, --allowfile, and
--denyfile options is now the same as Nmap's target specifications.
Additionally any errors in the allow or deny specifications are
reported when the program starts, not deferred until a connection is
received. [David]
2009-02-22 02:58:09 +00:00
david
73356bf715
Interpret '-' by itself as an IPv4 octet as being short for "0-255". So
...
192.168.-.0 is the same as 192.168.0-255.0. It looks like this was intended all
along, but a coding error kept it from working.
2009-02-21 04:00:21 +00:00
david
4b27c53433
Update target specification section in refguide.xml with newest revisions.
2009-02-21 02:09:20 +00:00
david
29cd3a2675
Some revision of device-types.txt.
2009-02-21 01:15:59 +00:00
david
1273142341
FIx a typo in nmap-service-probes, adjust some categorizations in nmap-os-db.
2009-02-21 00:34:33 +00:00
david
cdd24a6fb4
Add counts of how many of each device type is present in both nmap-os-db and
...
nmap-service-probes to device-types.txt.
2009-02-20 22:52:10 +00:00
david
c3606c3793
Document the four device types that were present in nmap-os-db but not
...
nmap-service-probes: encryption accelerator, proxy server, VoIP gateway, web
server.
2009-02-20 22:38:53 +00:00
david
1ca5e5b637
Canonicalize a device type in nmap-service-probes: "media-device" ->
...
"media device".
2009-02-20 19:36:49 +00:00
david
9323b53c68
Fix NSEDoc in msrpctypes.lua. A <code> was unterminated, and bullet lists can't
...
have newlines within each entry.
2009-02-20 18:46:26 +00:00
doug
531e2b7c22
MSSQL updates from Tom Sellers
2009-02-20 01:33:55 +00:00
doug
e13283b01e
Finished nmapsubmit-svfp-020309.mbx
2009-02-19 22:17:24 +00:00
doug
e087884f2c
Another batch of misc from nmapsubmit-svfp-020309.mbx (almost done)
2009-02-18 23:57:43 +00:00
fyodor
3d6a57c585
Khottabych movie
2009-02-18 03:33:50 +00:00
david
d8c3cf21a5
Add missing module name prefixes to usage examples in some NSE documentation.
2009-02-17 19:53:02 +00:00
fyodor
f0c645b9f2
2009-02-17 07:30:23 +00:00
fyodor
7917f7ae92
2009-02-17 07:12:52 +00:00
fyodor
874318bb34
note LQ award
2009-02-17 05:28:41 +00:00
fyodor
b226bdea98
Changes from chat with David and some of my own brainstorming
2009-02-17 00:00:54 +00:00
doug
7b862ddd1e
Another batch of misc from nmapsubmit-svfp-020309.mbx (hah - gopher)
2009-02-16 22:27:30 +00:00
david
827bf68360
Remove nmap-$(NMAP_VERSION)-win32.zip before rebuilding. If this isn't done,
...
then old files that were in a previous build can be in the zip file of a new
build that doesn't have those files anymore. When the zip command sees an
existing archive, it modifies the archive rather than rebuilding it from
scratch.
2009-02-16 19:04:41 +00:00
david
de3b94ac54
Remove the /OPT:NOWIN98 option from the Windows linker options. This gets rid
...
of a warning:
6>Linking...
6>LINK : warning LNK4224: /OPT:NOWIN98 is no longer supported; ignored
2009-02-16 18:50:36 +00:00
david
111146a717
Use script ids instead of full paths in NSE start/finish/error debug output.
2009-02-16 17:40:55 +00:00
david
0b3ff10e1d
Simplify the retrieval of script ids. Make get_id a method of struct
...
thread_record. Pass that directly to ScritpResult::set_id. The function
process_getScriptId is no longer needed.
2009-02-16 17:37:14 +00:00
doug
91129a3830
Lots more misc services from nmapsubmit-svfp-020309.mbx
2009-02-15 03:00:02 +00:00
fyodor
2f15befaf8
2009-02-15 02:40:12 +00:00
fyodor
8fe1c1226d
2009-02-15 01:54:23 +00:00
doug
bae386daa4
* Lots of misc fingerprints from nmapsubmit-svfp-020309.mbx
...
* Update to socks5 probe. Big thanks to Brandon for letting me test his machines!
2009-02-14 21:31:36 +00:00
david
31e62d195d
Fix an awkward cross-reference in scripting.xml. The generated text looked like
...
"These five variables are described in <versioninfo>" because the reference was
to a list item, not to its enclosing section. I changed it so it becomes 'These
five variables are the same as those described under <versioninfo> in the
section called "match Directive"'.
2009-02-14 16:26:50 +00:00
david
fb0f1cdd93
Remove an unnecessary call to keyWasPressed right before service_scan;
...
service_scan does that itself.
2009-02-14 16:25:46 +00:00
david
df25884daa
Add to CHANGELOG:
...
o [Ncat] The --send-only and --recv-only options now work in listen
mode as well as connect mode. [David]
2009-02-13 21:21:22 +00:00
david
77a304fb24
Eliminate a couple of (false) uninitialized variable warnings in
...
scan_engine.cc. Patch by Daniel Roethlisberger.
2009-02-13 16:14:20 +00:00
doug
7d6ead8b39
Last of the HTTP fingerprints from nmapsubmit-svfp-020309.mbx. 710 out of 1746 remaining FPs
2009-02-12 21:13:29 +00:00