[NMAP] Question about service version detection

Kushal Ramkumar <[email protected]> Wed, 10 Jul 2019 16:06:11 +0530
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAAdv=k+6XdCk1hkmU16D-LkxS5TtQz+_Pa05_U02mkRZ__TifA@mail.gmail.com>
--===============1987422141369269151==
Content-Type: multipart/alternative; boundary="000000000000a1eecc058d513f26"

--000000000000a1eecc058d513f26
Content-Type: text/plain; charset="UTF-8"

Hi,

I am attempting to run NMAP from a memory constrained device and to profile
the memory footprint of NMAP, I'm running it using valgrind's massif. I had
a couple of questions regarding this and I was hoping someone from the NMAP
team could help me out!

I see that the memory consumed increases as the number of open ports and
the duration of the scan increases. Is this because a data structure is
being populated with probe results (asynchronous I/O) that's growing in
size? The database that is referred to is simply 2.5MB, so that should be
loaded only once onto the RAM right?

Also, is there any way that I can optimize/restrict the maximum amount of
RAM consumed by NMAP? I see that the order of memory consumption (highest
to lowest) is Service Version Detection, OS Detection, TCP & UDP scans.

I have read Chapter 7 <http://I have read Chapter 7, but I didn't get the
answers to my questions.>, but I didn't get the answers to my questions.

I'm very new to NMAP and if this isn't the right place to post the
question, I apologize and request you to point me in the right direction!

Thanks,
Kushal

--000000000000a1eecc058d513f26
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>I am attempting to run NMAP from a =
memory constrained device and to profile the memory footprint of NMAP, I&#3=
9;m running it using valgrind&#39;s massif. I had a couple of questions reg=
arding this and I was hoping someone from the NMAP team could help me out!<=
/div><div><br></div><div>I see that the memory consumed increases as the nu=
mber of open ports and the duration of the scan increases. Is this because =
a data structure is being populated with probe results (asynchronous I/O) t=
hat&#39;s growing in size? The database that is referred to is simply 2.5MB=
, so that should be loaded only once onto the RAM right?=C2=A0</div><div><b=
r></div><div>Also, is there any way that I can optimize/restrict the maximu=
m amount of RAM consumed by NMAP? I see that the order of memory consumptio=
n (highest to lowest) is Service Version Detection, OS Detection, TCP &amp;=
 UDP scans.=C2=A0</div><div><br></div><div>I have read <a href=3D"http://I =
have read Chapter 7, but I didn&#39;t get the answers to my questions.">Cha=
pter 7</a>, but I didn&#39;t get the answers to my questions.=C2=A0=C2=A0<b=
r></div><div><br></div><div>I&#39;m very new to NMAP and if this isn&#39;t =
the right place to post the question, I apologize and request you to point =
me in the right direction!</div><div><br></div><div>Thanks,</div><div>Kusha=
l</div></div>

--000000000000a1eecc058d513f26--

--===============1987422141369269151==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
--===============1987422141369269151==--