Re: non existent script called with --script=all

[Fyodor <fyodor () insecure org>]

On Mon, Apr 27, 2009 at 05:18:02PM -0500, Kris Katterjohn wrote:
> When I suggested this very same idea over a year ago (when it was shot down by
> you and Brandon), you said that Diman had already tested with many scripts:
>
> http://seclists.org/nmap-dev/2008/q1/0514.html
>
> (and http://seclists.org/nmap-dev/2008/q1/0513.html is Brandon's detailed reply)

Hi Kris.  Nice to hear from you!  I suppose that if we end up removing
script.db after all, you can give us a big "I told you so" :).

Diman did do some testing with 10,000+ scripts (well, basically copies
of the same simple script), but that was years ago.  NSE has changed
dramatically since then, so I'd like to see newer benchmarks with
large numbers of scripts before I'd feel comfortable removing
script.db.  We can't really decide whether the logistical hassle is
worth the performance gain until we actually have measurements of the
(presumed) performance gain.  But if the cost of generating the
information at runtime with 1,000+ scripts is immaterial, I'd favor
removing script.db.  We could always revive the system if we ever
exceed that number of scripts and need it again.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org