From 71033d2812d392e15b49141a98048a3ce3213fd0 Mon Sep 17 00:00:00 2001
From: fyodor <fyodor@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Fri, 9 Aug 2013 04:02:41 +0000
Subject: [PATCH] o [NSE] Update dns-cache-snoop script to use a new list of
 top 50   domains rather than a 2010 list. [Nicolle Neulist]

---
 CHANGELOG                   | 10 +++++
 scripts/dns-cache-snoop.nse | 82 ++++++++++++++++++-------------------
 2 files changed, 51 insertions(+), 41 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG
index 78afc7f21..52573bfc5 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,8 @@
 # Nmap Changelog ($Id$); -*-text-*-
 
+o [NSE] Update dns-cache-snoop script to use a new list of top 50
+  domains rather than a 2010 list. [Nicolle Neulist]
+
 o [NSE] Added the qconn-exec script by Brendan Coles, which tests the
   QNX QCONN service for remote command execution.
 
@@ -54,6 +57,13 @@ o Nmap's routing table is now sorted first by netmask, then by metric.
 o [Ncat] The -i option (idle timeout) now works in listen mode as well
   as connect mode. [Tomas Hozza]
 
+o Updated the Nmap license agreement to close some loopholes and stop
+  some abusers.  Particularly companies which distribute malware-laden
+  Nmap installers as we caught Download.com doing last
+  year--http://insecure.org/news/download-com-fiasco.html.  The
+  updated license is in the all the normal places, including
+  https://svn.nmap.org/nmap/COPYING.
+
 o Fixed a byte-ordering problem on little-endian architectures when
   doing idle scan with a zombie that uses broken ID incremements.
   [David Fifield]
diff --git a/scripts/dns-cache-snoop.nse b/scripts/dns-cache-snoop.nse
index fb6bafc80..43dc4c396 100644
--- a/scripts/dns-cache-snoop.nse
+++ b/scripts/dns-cache-snoop.nse
@@ -76,58 +76,58 @@ local TIMED_NUM_SAMPLES = 25
 local TIMED_MULTIPLIER = 1.0
 
 -- This list is the first 50 entries of
--- http://s3.amazonaws.com/alexa-static/top-1m.csv.zip on 2010-06-11.
+-- http://s3.amazonaws.com/alexa-static/top-1m.csv.zip on 2013-08-08.
 local ALEXA_DOMAINS = {
 	"google.com",
 	"facebook.com",
 	"youtube.com",
 	"yahoo.com",
-	"live.com",
-	"wikipedia.org",
 	"baidu.com",
-	"blogger.com",
-	"msn.com",
-	"qq.com",
-	"twitter.com",
-	"yahoo.co.jp",
-	"google.co.in",
-	"taobao.com",
-	"google.de",
-	"google.com.hk",
-	"wordpress.com",
+	"wikipedia.org",
 	"amazon.com",
-	"sina.com.cn",
-	"google.co.uk",
-	"microsoft.com",
-	"bing.com",
-	"google.fr",
-	"ebay.com",
-	"myspace.com",
-	"yandex.ru",
-	"google.co.jp",
+	"qq.com",
+	"live.com",
 	"linkedin.com",
-	"163.com",
-	"google.com.br",
-	"mail.ru",
-	"flickr.com",
-	"craigslist.org",
-	"google.it",
-	"fc2.com",
-	"conduit.com",
-	"rapidshare.com",
-	"vkontakte.ru",
-	"google.es",
+	"twitter.com",
+	"blogspot.com",
+	"taobao.com",
+	"google.co.in",
+	"bing.com",
+	"yahoo.co.jp",
+	"yandex.ru",
+	"wordpress.com",
+	"sina.com.cn",
+	"vk.com",
+	"ebay.com",
+	"google.de",
+	"tumblr.com",
+	"msn.com",
+	"google.co.uk",
 	"googleusercontent.com",
-	"bbc.co.uk",
+	"ask.com",
+	"mail.ru",
+	"google.com.br",
+	"163.com",
+	"google.fr",
+	"pinterest.com",
+	"google.com.hk",
+	"hao123.com",
+	"microsoft.com",
+	"google.co.jp",
+	"xvideos.com",
+	"google.ru",
+	"weibo.com",
+	"craigslist.org",
+	"paypal.com",
+	"instagram.com",
+	"amazon.co.jp",
+	"google.it",
 	"imdb.com",
-	"soso.com",
-	"doubleclick.com",
-	"go.com",
-	"livejasmin.com",
+	"blogger.com",
+	"google.es",
 	"apple.com",
-	"aol.com",
-	"bp.blogspot.com",
-	"youku.com",
+	"conduit.com",
+	"sohu.com",
 }
 
 -- Construct the default list of domains.