Am Donnerstag 21 Februar 2013 15:30:56 schrieb Henri Doreau: > 2013/2/20 Jan-Oliver Wagner <jan-oliver.wag...@greenbone.net>: > > [...] > > Some of the changes I would like to establish quickly after OpenVAS-6 > > is released would be: > > > > * no "services" in scanner results: this is not task of the scanner to > > know or guess about > > Could you elaborate about this specific item? I don't get it. Are you > proposing to remove service detection NVTs?
look at the use of openvas-services file. Imagine you have a ssh running on port 80. Scanner will send via OTP "80/http". IMHO the scanner should not at all use some static services list and match the ports to it. It should identify a service and report this. I see it as the task of the Manager to attach IANA definition for informational purposes. Ideally the detected service is also shown. Got what drives me? Best Jan -- Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-devel mailing list Openvas-devel@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-devel
