Re: Can you send the Nmap Project some scan data?
Robin Wood <[email protected]> Tue, 11 Jun 2019 07:56:16 +0100
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CALmccy5x-yjKMstEpJwQKuEO3LA67gjTxihStA4_y9agz0dL6Q@mail.gmail.com> |
--===============1102291563558211954== Content-Type: multipart/alternative; boundary="000000000000b45036058b06cb44" --000000000000b45036058b06cb44 Content-Type: text/plain; charset="UTF-8" How do you want them submitted? GitHub issues, mailed to the list or to you directly? Robin On Tue, 9 Oct 2018, 19:22 Daniel Miller, <[email protected]> wrote: > Nmap community members and developers, > > The Nmap Project is in need of current port scans in order to update the > open-port frequency data that Nmap uses to determine which ports to scan. > This data is used every time a user scans the default 1000 ports, and it is > based on scan data that is over 10 years old. A lot has changed in that > time, and Nmap's port data is no longer up-to-date. > > We are already doing scans of the public Internet for this purpose. What > we desperately need is port scans of *internal* networks, behind the > firewalls and NAT, from as many different sources as possible. Ideal data > would be all-port scans (-p 1-65535), but everything is helpful, especially > scans that include more than the current default 1000 ports or that include > UDP or SCTP port scan results. > > In order to make sharing scans safer and easier, I've attached a couple of > scripts that can be used to strip the output files of any identifying > information, including service and OS fingerprinting results, hostnames, IP > addresses, and traceroute data. Our preference is for XML output files, > which can be processed with nmap-sanitize.py. If you have gnmap scan output > instead, gnmap-convert.pl will convert it into a stripped-down XML format. > > I really appreciate any help you can provide in this regard. Accurate port > frequency data will result in faster and more complete scan results for > everyone. > > Dan > > _______________________________________________ > Sent through the dev mailing list > https://nmap.org/mailman/listinfo/dev > Archived at http://seclists.org/nmap-dev/ --000000000000b45036058b06cb44 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"auto">How do you want them submitted? GitHub issues, mailed to = the list or to you directly?<div dir=3D"auto"><br></div><div dir=3D"auto">R= obin</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gm= ail_attr">On Tue, 9 Oct 2018, 19:22 Daniel Miller, <<a href=3D"mailto:dm= [email protected]">[email protected]</a>> wrote:<br></div><blockquote class= =3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd= ing-left:1ex"><div dir=3D"ltr"><div>Nmap community members and developers,<= /div><div><br></div><div><div>The Nmap Project is in need of current port s= cans in order to=20 update the open-port frequency data that Nmap uses to determine which=20 ports to scan. This data is used every time a user scans the default=20 1000 ports, and it is based on scan data that is over 10 years old. A=20 lot has changed in that time, and Nmap's port data is no longer=20 up-to-date.</div><div><br></div><div>We are already doing scans of the=20 public Internet for this purpose. What we desperately need is port scans of *internal* networks, behind the firewalls and NAT, from as many=20 different sources as possible. Ideal data would be all-port scans (-p=20 1-65535), but everything is helpful, especially scans that include more=20 than the current default 1000 ports or that include UDP or SCTP port=20 scan results.<br></div><div><br></div><div>In order to make sharing=20 scans safer and easier, I've attached a couple of scripts that can be= =20 used to strip the output files of any identifying information, including service and OS fingerprinting results, hostnames, IP addresses, and=20 traceroute data. Our preference is for XML output files, which can be=20 processed with nmap-sanitize.py. If you have gnmap scan output instead, <a = href=3D"http://gnmap-convert.pl" target=3D"_blank" rel=3D"noreferrer">gnmap= -convert.pl</a> will convert it into a stripped-down XML format.</div><div>= <br></div><div>I really appreciate any help you can provide in this regard. Accurate=20 port frequency data will result in faster and more complete scan results for everyone.</div><div><br></div><div>Dan<div class=3D"m_5574318596741730= 689gmail-adL"><br></div></div></div></div> _______________________________________________<br> Sent through the dev mailing list<br> <a href=3D"https://nmap.org/mailman/listinfo/dev" rel=3D"noreferrer norefer= rer" target=3D"_blank">https://nmap.org/mailman/listinfo/dev</a><br> Archived at <a href=3D"http://seclists.org/nmap-dev/" rel=3D"noreferrer nor= eferrer" target=3D"_blank">http://seclists.org/nmap-dev/</a></blockquote></= div> --000000000000b45036058b06cb44-- --===============1102291563558211954== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/ --===============1102291563558211954==--