Hi, We already started working on ICMP-based OS fingerpinting, so we would like to finish it, just to see if it will work fine (since we are still beginners in NASL :). We also considered using nmap so we could, after we finish this version, make an improved version that uses nmap.
Regards, Goran Licina -- Laboratory for Systems and Signals Department of Electronic Systems and Information Processing Faculty of Electrical Engineering and Computing University of Zagreb -----Original Message----- From: Michael Wiegand [mailto:[email protected]] Sent: Monday, April 06, 2009 2:08 PM To: Goran Ličina Cc: [email protected] Subject: Re: Re: [Openvas-plugins] New plugin development team * Goran Licina [ 3. Apr 2009]: > Hi, > > We decided to work on following plugins (for a start): > > os_fingerprint.nasl Just my two cents: I think OS fingerprinting is something we should use nmap for. nmap does an excellent job in that area and IMHO it would be a waste of time to reinvent the wheel here. Nmap adoption is currently hindered by the fact that we need to spawn a separate nmap for each host since there is currently no practical way to share information between host scans or on network level. This is something we would like to address, but I don't think we have the necessary resources for that in the short term. If we were to develop an NASL based OS detection in the meantime, we should at the very least make sure to use nmaps OS fingerprint DB (available at http://nmap.org/data/nmap-os-fingerprints, GPL). Any thoughts on this issue? Regards, Michael -- Michael Wiegand | OpenPGP: D7D049EC | Intevation GmbH - www.intevation.de Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-plugins mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
