RE: OS Detection

["Ganga Bhavani" <GBhavani () everdreamcorp com>]

Hi,

  I have added an option (--osscan_only) in NMAP for OS detection (only). This code is optimized to scan ports till one 
open port and one closed port is found instead of scanning 1659 ports.

please find attached the nmap3.50-osdetect.patch. 

Thanks,
Ganga 

-----Original Message-----
From: Ganga Bhavani [mailto:GBhavani () everdreamcorp com]
Sent: Wednesday, June 02, 2004 10:32 AM
To: nmap-dev () insecure org
Subject: OS Detection



Hi,

 We are trying to use the Nmap for OS detection. Going through code, I 
 found that NMap queries 1659 ports for usual scanning but uses only 
 one open port and one closed port for OS detection. If  the user is using 
 NMAP for only OS detection (only -O), can the scanning process be 
 terninated as soon as one open port and one closed port is found ? 

 This  is to optimize this particular option.I would like to know if there any downside to this approach?

Any other suggestions to optimize the OS detection ?


Thanks,
Ganga


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org

Attachment: nmap-3.50-osdetect.patch
Description: nmap-3.50-osdetect.patch

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org