On Tue, 11 Nov 2003, [big5] stephen tsang wrote:
> Would all plug-ins are sent out standard TCP/IP packets to the machine for security
> scanning?? is there any plug-ins sent out non standard TCP/IP packets??
>
> Many thanks.
>
> Shining Friends�B�n�ߦn���B����p�q...
> �����a�n ���߳sô
> http://ringtone.yahoo.com.hk/
>
Hello Stephen,
yes, some plugins will "forge" packets in order to set specific values
within headers. You can do something like:
grep forge_ /usr/local/lib/nessus/plugins/*.nasl | awk -F: '{print $1}' |
sort | uniq | more
to see which plugins use the forge_* functions.
HTH,
John Lampe
jwlampe -at- nessus.org
