Re: New C functions for Nessus 2.2?

Thomas Reinke <[email protected]> Fri, 17 Sep 2004 11:28:04 -0400
Newsgroups gmane.comp.security.nessus.devel
Message-ID <[email protected]>
Michel Arboi wrote:
> On Thu Sep 16 2004 at 23:05, Thomas Reinke wrote:
> 
> 
> Probably not, but the most difficult part is the parser, if we want
> it to handle several languages. I suggest that we keep this part in
> NASL because we'll probably need to add another language.

Sensible.  FWIW, having just sifted through a list of over 1.5 million
"Dates" returned from distinct IP addresses in HTTP headers requests,
only 308 of them  had the format laid out differently from the one
shown below:

          "Thu, 16 Sep 2004 21:00:36 GMT"

Of those 308, 72 of them played around with different formats for GMT
such as -0300, GMT+0200. A bunch more left out the comma after the
weekday.

Bottom line is that the dates in HTTP headers don't seem to be
internationalized on web servers (either that, or there are
very few internationalized servers). So, if one was to rigourously
stick with the format used by Apache, you'd catch 99.98% of the
cases. The remaining, well, I'd say you just wouldn't report a
parseable date/time, that's all.


> Writing mktime in NASL is easy if we stick to UTC. Handling time zones
> is harder.

Agreed.

> OK, let's implement mktime in C -- and hope that all time zones will be
> implemented on all systems so that we have the same behaviour every where.

Great!

Thomas
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel