[NMAP] Question about service version detection
Kushal Ramkumar <[email protected]> Wed, 10 Jul 2019 16:06:11 +0530
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CAAdv=k+6XdCk1hkmU16D-LkxS5TtQz+_Pa05_U02mkRZ__TifA@mail.gmail.com> |
--===============1987422141369269151== Content-Type: multipart/alternative; boundary="000000000000a1eecc058d513f26" --000000000000a1eecc058d513f26 Content-Type: text/plain; charset="UTF-8" Hi, I am attempting to run NMAP from a memory constrained device and to profile the memory footprint of NMAP, I'm running it using valgrind's massif. I had a couple of questions regarding this and I was hoping someone from the NMAP team could help me out! I see that the memory consumed increases as the number of open ports and the duration of the scan increases. Is this because a data structure is being populated with probe results (asynchronous I/O) that's growing in size? The database that is referred to is simply 2.5MB, so that should be loaded only once onto the RAM right? Also, is there any way that I can optimize/restrict the maximum amount of RAM consumed by NMAP? I see that the order of memory consumption (highest to lowest) is Service Version Detection, OS Detection, TCP & UDP scans. I have read Chapter 7 <http://I have read Chapter 7, but I didn't get the answers to my questions.>, but I didn't get the answers to my questions. I'm very new to NMAP and if this isn't the right place to post the question, I apologize and request you to point me in the right direction! Thanks, Kushal --000000000000a1eecc058d513f26 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hi,<div><br></div><div>I am attempting to run NMAP from a = memory constrained device and to profile the memory footprint of NMAP, I= 9;m running it using valgrind's massif. I had a couple of questions reg= arding this and I was hoping someone from the NMAP team could help me out!<= /div><div><br></div><div>I see that the memory consumed increases as the nu= mber of open ports and the duration of the scan increases. Is this because = a data structure is being populated with probe results (asynchronous I/O) t= hat's growing in size? The database that is referred to is simply 2.5MB= , so that should be loaded only once onto the RAM right?=C2=A0</div><div><b= r></div><div>Also, is there any way that I can optimize/restrict the maximu= m amount of RAM consumed by NMAP? I see that the order of memory consumptio= n (highest to lowest) is Service Version Detection, OS Detection, TCP &= UDP scans.=C2=A0</div><div><br></div><div>I have read <a href=3D"http://I = have read Chapter 7, but I didn't get the answers to my questions.">Cha= pter 7</a>, but I didn't get the answers to my questions.=C2=A0=C2=A0<b= r></div><div><br></div><div>I'm very new to NMAP and if this isn't = the right place to post the question, I apologize and request you to point = me in the right direction!</div><div><br></div><div>Thanks,</div><div>Kusha= l</div></div> --000000000000a1eecc058d513f26-- --===============1987422141369269151== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/ --===============1987422141369269151==--