* Goran Li?ina [13. May 2009]: > Did you plan to integrate completely nmap in OpenVAS in future > versions or you suggest that we should make plugin that would use nmap > database of fingerprints? Because if you plan to integrate it somehow, > there is no much sense in wasting time to implement nmap approach in > new plugin.
We would like to integrate nmap a lot closer in the future. In fact, this is one of the topics that will be discussed at the OpenVAS DevCon2 in July. One consequence of this might be that we integrate nmap as a library, thus making a lot of nmap functionality available to the NVTs. This would make integrating the nmap OS database trivial, so I guess implementing it in NASL would be a waste of time as you suggest. > However, old plugins that use results generated by our plugin (those > which have os_fingerprint.nasl as dependency) mostly read results from > "Host/OS/ICMP" KB item, so our plugin is necessary for them to work > properly. That sounds good. So your NVT will be useful right now; once we integrate nmap, we could migrate the OS detection to nmap. > Another thing, we would like to start working on plugins that detect > some newer CVE vulnerabilities. Can you tell us what is the procedure > for picking these and where can we see who is working on which > vulnerability? As chandra and mime said, not yet, but this is needed. I think it should ultimately be up to the NASL developers to decide what the best coordination platform would be. If you guys want to, I can set up a tracker on wald (http://wald.intevation.org/tracker/?group_id=29) for you. Just let me know what you think would be best. Regards, Michael -- Michael Wiegand | OpenPGP: D7D049EC | Intevation GmbH - www.intevation.de Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
pgp1EuUp4B2wq.pgp
Description: PGP signature
_______________________________________________ Openvas-plugins mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
