diff --git a/CHANGELOG b/CHANGELOG index de4e17840..dd1b9b468 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,27 @@ # Nmap Changelog ($Id$); -*-text-*- +o Expanded nmap-services to include information on how frequently each + port number is found open. The results were generated by scanning + tens of millions of IPs on the Internet. + +o Nmap now scans the most common 1,000 ports by default in either + protocol (UDP scan is still optional). This is a decrease from + 1,715 TCP ports and 1,488 UDP ports in Nmap 4.68. So Nmap is faster + by default and, since the port selection is better, often finds more + of the open ports as well. + +o Nmap fast scan (-F) now scans the top 100 ports by default in either + protocol. This is a decrease from 1,276 (TCP) and 1,017 (UDP) in + Nmap 4.68, leading to an order of magnitude decrease in port + scanning time. + +o The --top-ports option lets you specify the number of ports you wish + to scan in each protocol, and will pick the most popular ports for + you based on the new frequency data. For both TCP and UDP, the top + 10 ports gets you roughly half of the open ports. The top 1,000 + (out of 65,536 possible) finds roughly 93% of the open TCP ports and + more than 95% of the open UDP ports. + o Added dns-safe-recursion-port and dns-safe-recursion-txid (non default NSE scripts) which use the 3rd party dns-oarc.net to test the source port and transaction ID randomness of a discovered DNS