I'd like to go further on this subject and post this excerpt from
nmap_wrapper.c
(into nessus-plugins). It speaks for itself

/*
 * That's a *FAKE* progress bar. Its purpose is just
 * to show users that nmap is still alive, not to
 * show the level of completion of a scan
 *
 * This is update "MacOS-style", meaning that
 * n% of the remaining chart is updated every
 * three seconds
 *
 * Thanks to Michel Arboi for this suggestion
 *
 * Q: "is not it lame to have a fake progress bar ?"
 * A: "Yes it is. However, nmap offers no convienent way to have a
 *     real progress bar, because of the retries, and users would
 *     send me panicked emails saying that 'nmap does not work' because
 *     the progress bar was not updated. If you can come up with
 *     a better solution, let me know"
 */
[...]
static void
update_progress_bar()
{
...


Cristobal Soto wrote:
> 
> I'd add this to the faq too.
> I went through this issue some time ago, and my only conclusion was the
> progress bar fills proportionally to the # of ports being scanned
> relative to the time each port is probed. Of course this is an
> approximation and when the scan goes slow, the bar fills up long before
> the end of the nmap scan.
> 
> best rgds
> Cristobal
> 
> Michel Arboi wrote:
> >
> > Tony Howlett <[EMAIL PROTECTED]> writes:
> >
> > > I am using nessus in doing some assessments of large networks.   I
> > > have noticed that nessus often "hangs" at the end of the nmap portion
> > > of the test for long periods of time.
> >
> > [A question for the FAQ?]
> > There is no way to know how many % of the work have already been done
> > by nmap. So the slider is fake: every X seconds, it moves of Y % of
> > the remaining space. So it slows down little by little.
> > This trick comes from MacOS.
> > The problem is that X is too small or Y too big.
> >
> > --
> > mailto:[EMAIL PROTECTED]
> > GPG Public keys: http://michel.arboi.free.fr/pubkey.txt
> > http://michel.arboi.free.fr/    http://arboi.da.ru/
> > FAQNOPI de fr.comp.securite : http://faqnopi.da.ru/
> 
> --
> Cristobal Soto Y.
> ICSA.cl  -  The e-risk security company - http://www.icsa.cl

-- 
Cristobal Soto Y.
ICSA.cl  -  The e-risk security company - http://www.icsa.cl

Reply via email to