nmap-scanner-general — Nmap::Scanner discussion

Re: [Nmap-scanner-general] Scanner examples

[Max <nm...@we...>]

Ravi,

    What version of Nmap::Scanner are you using?  It looks like you are
not using the latest version, 0.7, as that has multiple host names per
host ..  I recommend you upgrade if this is the case .. please let me know.

I suggest this because between version .5 (CPAN version) and .7 many bugs
were fixed.  I will be uploading .7 to CPAN shortly.

Max

On Sun, 17 Apr 2004, "Ravi Malghan" wrote:
> Max: Thanks.The problem I am having is figuring out the structure of the
> $results. I donot seem to be getting value for $host->name().
> 
> For example the perl script has the following lines:
> ============
> my $hosts = $results->get_host_list();
> while(my $host = $hosts->get_next()) {
> print "On ".  $host->name() .": \n";
> ...
> ...
> =========
> When I run the script, I donot get the name of the host thatz being scanned.
> 
> #./scan.pl 129.44.171.87-90
> On :
> On :
> On :
> On :
> #
> 

Re: [Nmap-scanner-general] Scanner examples

[Ravi M. <rma...@vz...>]

Max: Thanks.The problem I am having is figuring out the structure of the
$results. I donot seem to be getting value for $host->name().

For example the perl script has the following lines:
============
my $hosts = $results->get_host_list();
while(my $host = $hosts->get_next()) {
print "On ".  $host->name() .": \n";
...
...
=========
When I run the script, I donot get the name of the host thatz being scanned.

#./scan.pl 129.44.171.87-90
On :
On :
On :
On :
#

Any suggestions.
Thanks
Ravi
----- Original Message ----- 
From: "Max" <nm...@we...>
To: <nma...@li...>
Sent: Saturday, April 17, 2004 11:02 PM
Subject: Re: [Nmap-scanner-general] Scanner examples


> Ravi,
>
> On Fri, 16 Apr 2004 18:08:39 EDT, "Ravi Malghan" wrote:
> > Hi: I am trying to build a simple script which will ping a subnet and =
> > tell me all the IP addresses that are pingable in a variable inside the
=
> > script. I am trying to get started using the pingscan.pl under the =
> > example directory. When I run nmap from command prompt, it gives me the
=
> > hosts which are up
> >
> > Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-04-16 17:18
=
> > EDT
> > Host 137.45.171.66.subscriber.vzavenue.net (66.171.45.137) appears to be
=
> > up.
> > Nmap run completed -- 256 IP addresses (1 host up) scanned in 63.600 =
> > seconds
> >
> > But when I run pingscan, I get no output
> > ./pingscan.pl 66.171.45.*
> >
> > Is the usage of the Nmap::Scanner->new(); described anywhere.
>
> perldoc Nmap::Scanner
> perldoc Nmap::Scanner::Scanner
>
> Also, when running a script from the shell, be sure to enclose wildcards
> in quotes:
>
> ./pingscan.pl '66.171.45.*'
>
> Thank you for trying out the module .. please let us know if that doesn't
> help or you need more help.
>
> Regards,
> Max
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> Nmap-scanner-general mailing list
> Nma...@li...
> https://lists.sourceforge.net/lists/listinfo/nmap-scanner-general

Re: [Nmap-scanner-general] Scanner examples

[Max <nm...@we...>]

Ravi,

On Fri, 16 Apr 2004 18:08:39 EDT, "Ravi Malghan" wrote:
> Hi: I am trying to build a simple script which will ping a subnet and =
> tell me all the IP addresses that are pingable in a variable inside the =
> script. I am trying to get started using the pingscan.pl under the =
> example directory. When I run nmap from command prompt, it gives me the =
> hosts which are up
> 
> Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-04-16 17:18 =
> EDT
> Host 137.45.171.66.subscriber.vzavenue.net (66.171.45.137) appears to be =
> up.
> Nmap run completed -- 256 IP addresses (1 host up) scanned in 63.600 =
> seconds
> 
> But when I run pingscan, I get no output
> ./pingscan.pl 66.171.45.*
> 
> Is the usage of the Nmap::Scanner->new(); described anywhere.

perldoc Nmap::Scanner 
perldoc Nmap::Scanner::Scanner

Also, when running a script from the shell, be sure to enclose wildcards
in quotes:

./pingscan.pl '66.171.45.*'

Thank you for trying out the module .. please let us know if that doesn't
help or you need more help.

Regards,
Max

[Nmap-scanner-general] Scanner examples

[Ravi M. <rma...@vz...>]

Hi: I am trying to build a simple script which will ping a subnet and =
tell me all the IP addresses that are pingable in a variable inside the =
script. I am trying to get started using the pingscan.pl under the =
example directory. When I run nmap from command prompt, it gives me the =
hosts which are up

Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-04-16 17:18 =
EDT
Host 137.45.171.66.subscriber.vzavenue.net (66.171.45.137) appears to be =
up.
Nmap run completed -- 256 IP addresses (1 host up) scanned in 63.600 =
seconds

But when I run pingscan, I get no output
./pingscan.pl 66.171.45.*

Is the usage of the Nmap::Scanner->new(); described anywhere.

Any suggestions.
Ravi

[Nmap-scanner-general] Nmap::Scanner version 0.7, now available for download

[Max S. <nm...@we...>]

Hi,

Nmap::Scanner is a perl module that allows a programmer to easily 
create scripts that use nmap with perl.

Version .7 of Nmap::Scanner is now available for download.  
Special thanks to Mario Manno for joining this project as a 
developer and for his many contributions to this release.

Highlights of this release include:
*  Convert XML output from module to be nmap DTD-compliant
*  Convert all classes/attributes to match nmap XML names
*  Clean up class attribute initializers to get rid of
   many 'undefined value' warnings when running under perl 5.8.
*  Improved error handling.
*  Module can now act on nmap XML output files to re-create
   previously performed scans (scan_from_file() method).
*  Module still provides method to just start a scan and
   return open file handles and nmap PID via IPC (open_nmap()).
*  Much improved nmap binary finding code for Windows systems
   using cygwin.
*  Many smaller bug fixes.
*  Moved project to Source Forge.

Thank you to everyone who posted problems, suggestions and patches.  
Your input is much appreciated!

You can get the latest release via the Nmap::Scanner home page:

http://nmap-scanner.sf.net/

Please feel free to post any questions / problems / suggestions
you have to the Source Forge mailing list for this project, to 
the 'Help' forum available on the Source Forge project page, or to
the bug tracker available via the SourceForge project page:

http://www.sf.net/projects/nmap-scanner/

Regards,
Max

[Nmap-scanner-general] Nmap::Scanner & CGI

[<c99...@al...>]

Hi,

I'm having problems sending the output of the scan() function to the brow=
ser,
after the call to the function the browser stops, and i can't print anyth=
ing.
I've tried $|++, i'm running the script as a root, and i've also tried ve=
rsion
.7a of the Nmap::Scanner module. The script works fine in a shell.

here's a snippet of the code...


#!/usr/bin/perl

use strict;
use CGI;
$|++;

use Data::Dump qw(pp);
use Nmap::Scanner;

my $main =3D new CGI;
print $main->header;

my $scanner =3D Nmap::Scanner->new();

my $host =3D shift;

$scanner->tcp_syn_scan();
$scanner->no_ping();
$scanner->add_scan_port('1');
$scanner->add_scan_port('80');
$scanner->guess_os();
$scanner->add_target($host);
$scanner->version_scan();

my $results =3D $scanner->scan();

(can't send nothing to the browser from this point)
.
.
.
prints...
.
.
.


thanks


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Re: [Nmap-scanner-general] Nmap::Scanner XML.pm change

[Max <nm...@we...>]

Will,

On Fri, 27 Feb 2004 12:42:28 EST, "Will Saxon" wrote:
> I am actually still using .5, primarily because that's what is available in f
> reebsd ports. I like to use those when available.

Makes sense.  .5 has a lot of those unitialized value problems .. along
with some other bugs that could cause your scripts to hang .. be aware
of that.  Mario Manno, who is now the official second developer on this
project, did a bunch of patches to fix those issues for .7.  Until we
hit 1.0 there may also be object model and attribute name changes as
well FYI :).

> I'll harass the port maintainer and see if I can get it updated to .7 when yo
> u release that.

Thanks!  

> Do you recommend an upgrade to perl 5.8? I have held off doing that because I
>  will need to move or reinstall several other perl modules on several machine
> s, but maybe it's time to do so.

There is nothing in perl 5.8 that will benefit you in terms of this module,
in fact with .5 you will see many warnings about uninitialized values that
might cause your scripts to fail .. and I know that FreeBSDs' threading 
support is still stabilizing, so it's not like you could use that to your
advantage with 5.8.  If you are happy with 5.6.x, I say stick with it until
you find a pressing reason to upgrade :) .. I am really looking forward to
perl 6.

Regards,
Max

RE: [Nmap-scanner-general] Nmap::Scanner XML.pm change

[Will S. <Wi...@ho...>]

> -----Original Message-----
> From: Max [mailto:nm...@we...]
> Sent: Friday, February 27, 2004 2:30 AM
> To: nma...@li...
> Subject: Re: [Nmap-scanner-general] Nmap::Scanner XML.pm change=20
>=20
>=20
> Will,
>=20
>     Thanks for the patch!  You are using .7alpha now, yes? =20

I am actually still using .5, primarily because that's what is available =
in freebsd ports. I like to use those when available.

I'll harass the port maintainer and see if I can get it updated to .7 =
when you release that.

Do you recommend an upgrade to perl 5.8? I have held off doing that =
because I will need to move or reinstall several other perl modules on =
several machines, but maybe it's time to do so.

-Will

Re: [Nmap-scanner-general] Nmap::Scanner XML.pm change

[Max <nm...@we...>]

Will,

    Thanks for the patch!  You are using .7alpha now, yes?  You found a
    valid fix, but a better one I think is to set the PORT_COUNT element
    to 0 in sub new { } .. that is what I have done.  
    
    $self->{PORT_COUNT} = 0;
    
    This I feel is a preferred solution because having the > 0 test
    is clearer logic (in my opinion) than just (value) .. does that
    make sense?  Feel free to argue if you disagree :).

    perl 5.8.x is more picky about uninitialized values than 5.6.x was .. so 
    there may be others of these to clean up.

    What I did with the model classes was set all class attributes to
    reasonable default values that would evaluate as 'false but defined.'

    Please let me know if you find other places where this is the case ..
    I will hold off on the official .7 release for another week and do
    some checking into this myself .. in XML.pm I have several hash
    elements that are initialized to undef, but only because they are
    object references so setting them to 0 or "" obscures (in my opinion)
    the intent of the variables.

    Good find, Will!  Thank you for reporting this and for your patch.
    Anyone else still seeing warnings about uninitialized values.

    Viktor, how are things working for you now that you are using version
    .7 .. or are you using that version?  Are you still having problems or 
    are your scripts working properly now?

Regards,
Max

On Fri, 27 Feb 2004 11:20:28 EST, "Will Saxon" wrote:


> Hello,
> 
> I use this module to perform regular scans of our network using perl 5.6.1 on
>  FreeBSD (currently 5.2.1-RELEASE). Every time the scans run I get output lik
> e:
> 
> Use of uninitialized value in numeric gt (>) at /usr/local/lib/perl5/site_per
> l/5.6.1/Nmap/Scanner/Backend/XML.pm line 157.
> 
> I have 'fixed' this, but I don't know if what I did will cause things to work
>  incorrectly. I think anything greater than zero counts as 'true' for Perl so
>  it ought to work ok. Here is my patch:

[Nmap-scanner-general] Nmap::Scanner XML.pm change

[Will S. <Wi...@ho...>]

Hello,

I use this module to perform regular scans of our network using perl =
5.6.1 on FreeBSD (currently 5.2.1-RELEASE). Every time the scans run I =
get output like:

Use of uninitialized value in numeric gt (>) at =
/usr/local/lib/perl5/site_perl/5.6.1/Nmap/Scanner/Backend/XML.pm line =
157.

I have 'fixed' this, but I don't know if what I did will cause things to =
work incorrectly. I think anything greater than zero counts as 'true' =
for Perl so it ought to work ok. Here is my patch:

--- XML.pm.orig Fri Feb 27 11:12:58 2004
+++ XML.pm      Fri Feb 27 11:09:14 2004
@@ -154,7 +154,7 @@
             $self->{PORT_COUNT}++;
             undef $self->{NMAP_PORT};
         } elsif ($el->{Name} eq 'ports') {
-            unless ($self->{PORT_COUNT} > 0) {
+            unless ($self->{PORT_COUNT}) {
                 $self->{NMAP_BACKEND}->notify_no_ports_open(
                     $self->{NMAP_HOST}, =
$self->{NMAP_HOST}->extra_ports()
                 );

_____________________________________________
Will Saxon
Systems Programmer - Network Services
Department of Housing and Residence Education
University of Florida
Email: wi...@ho...
Phone: (352) 392-2171 x10148

[Nmap-scanner-general] Version .7 stable release and other news

[Max S. <nm...@we...>]

Hi,

    First, Mario has decided to become a developer on the
nmap-scanner project.  Welcome and thank you, Mario.  If
anyone else is interested who is on this list, please
write me and let me know and we can talk.

Second, At the end of next week I will be releasing .7
of Nmap::Scanner to sourceforge.net and CPAN, as I feel
confident that version .7 is stable enough for CPAN.

Mario suggested in a previous email that it would be a good
idea to get the nmap XML element/attribute names in line with
the Nmap::Scanner objects/attributes.  Now is definitely the
time to do that, before we reach 1.0.  At 1.0 I want to have
a lock-down on that kind of change barring some unforeseen
ommission or change in nmap itself.

If any of you have any requests for enhancements, bugs,
thoughts, etc about nmap-scanner, please take advantage
of the Sourceforge tools and post them!

Thank you all for using nmap-scanner and for the feedback
and patches you have provided ... the stability of the 
code is increasing much more quickly now that I am not
the only one developing it! :P

Regards,
Max

[Nmap-scanner-general] Re: [Nmap-scanner] Nmap::Scanner .7 alpha ready for use!

[Max <nm...@we...>]

Mario and others,

    As you all now know, the sourceforge mailing list is up and running.

    I will be turning off posting to the existing webwizarddesign.com
    list today.

    The new project page is

    http://nmap-scanner.sourceforge.net/

    Sourceforge provides us with many tools that I hope will make work and
    discussion on this project more productive, including a web-based
    forum :).

On Wed, 11 Feb 2004 18:43:47 +0100, Mario Manno wrote:
> > Good point!  If you patch things, please post your patch to the list
> > and I will apply it .. otherwise I can do this or we can divide the
> > work and do it that way ... any way is fine with me.
> 
> Ah, thats no work at all.. I'll append the patch, but i am not sure i
> got all the relevant "if defined" lines.
> The people who use strict and use warning are the same who use
> valdidating xml parsers I guess :-) ?

haha .. no, it is a good and recommended practice with perl to always
'use strict' .. eliminates a lot of otherwise hard-to-find problems.

> I like ruby, maybe I take a look into it.

The ruby version should be much faster to code than the perl version ..
that has been my experience with ruby at least.  I really enjoy 
coding with ruby.  We can upload as many modules to the sf account as
we like, so we could have separate ruby, python, PHP, <other language>
implementations.  I would really enjoy having multiple language support
once we reach version 1 with perl, but I think it is best to wait until
we are stable with perl as maintenance then becomes much more complex
with multiple language support.

2) I thought about distributed scanning some time ago.
> I came to the conclusion that it will only work if it is integrated in
> nmap itself. You can't really delegate all scan types. Os Detection for
> example wants an open port, it won't work if another node scans this
> port. So you could probably do simple distributed scanning via some kind
> of remote nmap starter. i tried it in ruby, but had to give up as i
> realized i had no idea when to distribute a scan to other nodes.
> there had to be some algorithm to decide who gets the scan.

Gotcha.  Have you checked out the existing distributed nmap scanning
project?  I think it is called rnmap.

The algorithm could be as simple as "I have 300 hosts and 5 peers,
each gets 60 hosts" .. that would speed up scans in and of itself
for most cases.

I understand and respect the argument for having things run as fast
as possible by adding them to nmap itself or by extending nmap ..
I personally prefer to have programs done in as high a level
language as they can be done in because they then become more
accessible and easier to maintain.  For just about any program
that is currently done in a lower-level language that same
program can be moved to a high level language N time later because
CPU / computer speeds consistenly increase over time (so far).

> But I want to build a "nmap to rdf feed" scanner.
> This could be done with Nmap::Scanner i think.
> The rdf feeds of different servers could be collected into one master
> rdf feed.=20

That sounds like a very cool project.

> 3)
> i'm looking into berkeleys xml db, it should not be to difficult to
> store results there. since this is my first contact with xml databases i
> can't tell you more at the moment, but the examples look simple enough.
> Maybe there is some open source equivalent which i can just apt-get ...

I would like to play with that as well .. nice idea.

> and)
> I would like to have Nmap::Scanner use the same method names, properties
> as the tag names in the xml file.
> I find it  disturbing to use portid in the xml and number in my perl
> code, what do you think, is renaming possible ?

That sounds good to me :) and makes good sense.  We have CVS access now
on sourceforge.net.  Sign up for an account on SF if you don't have one,
then send me your sf user name and I will add you as a developer on the
project so you can access CVS directly .. the caveat is that we need then
to still communicate, via this list, the online SF forums, somehow, to
talk about planned changes before doing them .. that goes for me as
well as you.  If you would rather just post patches and have me apply
them, that is fine.  Just let me know on or off list.

If anyone else is interested in becoming a developer, let me know .. 
once you contribute a few patches / non-trivial enhancements that
show your skill and competence (I don't mean that in a threatening
or demeaning way) I will be happy to add you as a developer to
the project.  

If you have an interest in doing something else for the project,
please let me know.  If you prefer to not do anything additional,
that is absolutely fine as well. :)

The SF project has a feature release / requested enhancements section!  
Everyone please feel free to post ideas there as well as
bug reports under the 'Bugs' section .. I think you can post anonymously
if you are shy or don't want the public to know who you are.

Feel free to ask questions that come up about using the new project on
sourceforge here if any come up!

Sourceforge is really a great service for OS projects.

Regards,
Max