diff --git a/CHANGELOG b/CHANGELOG index e5bdef8a0..ce923ea2a 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,8 +1,8 @@ # Nmap Changelog ($Id$); -*-text-*- -o Nsock now returns data from UDP packets individually, preserving the packet - boundary, rather than concatenating the data from multiple packets - into a single buffer. This fixes a problem related to our +o Nsock now returns data from UDP packets individually, preserving the + packet boundary, rather than concatenating the data from multiple + packets into a single buffer. This fixes a problem related to our reverse-DNS system, which can only handle one DNS packet at a time. Thanks to Tim Adam of ManageSoft for debugging the problem and sending the patch. Doug Hoyte helped with testing, and it was @@ -24,91 +24,94 @@ o Added the undocumented (except here) --nogcc option which disables scan group of machines is treated separately. This is just an experimental option for now. [Fyodor] -o Added a new NSE Unpwdb (username/password database) library for easily - obtaining usernames or passwords from a list. The functions usernames() - and passwords() return a closure which returns a new list entry with - every call, or nil when the list is exhausted. You can specify your - own username and/or password lists via the script arguments userdb - and passdb, respectively. [Kris] +o Added a new NSE Unpwdb (username/password database) library for + easily obtaining usernames or passwords from a list. The functions + usernames() and passwords() return a closure which returns a new + list entry with every call, or nil when the list is exhausted. You + can specify your own username and/or password lists via the script + arguments userdb and passdb, respectively. [Kris] o The Ports/Hosts display in Zenmap now has different colors for open and closed ports. [Vladimir] o Fixed the "resolution errors not showing up" bug. Actually, from now - on, all errors will be displayed properly in the Zenmap window, since - stderr is also redirected there (until now, only stdout was + on, all errors will be displayed properly in the Zenmap window, + since stderr is also redirected there (until now, only stdout was displayed). [Vladimir] -o NSE now works with the Ping Scan (-sP) to execute host scripts. [Kris] +o NSE now works with the Ping Scan (-sP) to execute host + scripts. [Kris] -o [NSE] nse_string has been removed and equivalent, cleaner, procedures - have been moved to nse_main and nse_nsock. [Patrick] +o [NSE] nse_string has been removed and equivalent, cleaner, + procedures have been moved to nse_main and nse_nsock. [Patrick] o [NSE] Case insensitive categories. [Patrick] -o [NSE] Porttests and Hosttests tables are now in the Lua registry where - they belong. [Patrick] +o [NSE] Porttests and Hosttests tables are now in the Lua registry + where they belong. [Patrick] o [NSE] Each thread for a script gets its own action closure (and - upvalues). See: http://seclists.org/nmap-dev/2008/q2/0549.html [Patrick] + upvalues). See: http://seclists.org/nmap-dev/2008/q2/0549.html + [Patrick] o [NSE] script_scan_result structure has been changed to a class, - ScriptResult, that now uses std::strings to hold a Script's output and - id. This alleviates the need to manage memory on the heap explicitly - (malloc & free). [Patrick] + ScriptResult, that now uses std::strings to hold a Script's output + and id. This alleviates the need to manage memory on the heap + explicitly (malloc & free). [Patrick] -o [NSE] The runlevel structure has been placed in the thread record structure - so we no longer need to manage the runlevel explicitly on the heap. [Patrick] +o [NSE] The runlevel structure has been placed in the thread record + structure so we no longer need to manage the runlevel explicitly on + the heap. [Patrick] -o Fixed host discovery probe matching when looking at the returned TCP data in - an ICMP error message. This could lead to incorrectly discarded responses - and the debugging error message: "Bogus trynum or sequence number in ICMP - error message" [Kris] +o Fixed host discovery probe matching when looking at the returned TCP + data in an ICMP error message. This could lead to incorrectly + discarded responses and the debugging error message: "Bogus trynum + or sequence number in ICMP error message" [Kris] -o Fixed a segmentation fault in Nsock which occurred when calling nsock_write() - with a data length of -1 (which means the data is a NULL-terminated string - and Nsock should take the length itself) and the Nsock trace level was at - least 2. [Kris] +o Fixed a segmentation fault in Nsock which occurred when calling + nsock_write() with a data length of -1 (which means the data is a + NULL-terminated string and Nsock should take the length itself) and + the Nsock trace level was at least 2. [Kris] -o Nsock now supports binding to a local address and setting IPv4 options - with nsi_set_localaddr() and nsi_set_ipoptions(), respectively. [Kris] +o Nsock now supports binding to a local address and setting IPv4 + options with nsi_set_localaddr() and nsi_set_ipoptions(), + respectively. [Kris] -o Nmap's Nsock-utilizing subsystems (DNS, NSE, version detection) have been - updated to support the -S and --ip-options flags. [Kris] +o Nmap's Nsock-utilizing subsystems (DNS, NSE, version detection) have + been updated to support the -S and --ip-options flags. [Kris] o Added --ip-options support for the connect() scan (-sT). [Kris] -o The NSE Comm library now defaults to trying to read as many bytes as are - available rather than lines if neither the "bytes" nor "lines" options are - given. Thanks to Brandon for reporting a problem which he noticed in the - dns-test-open-recursion script. [Kris] +o The NSE Comm library now defaults to trying to read as many bytes as + are available rather than lines if neither the "bytes" nor "lines" + options are given. Thanks to Brandon for reporting a problem which + he noticed in the dns-test-open-recursion script. [Kris] -o Updated zoneTrans.nse to replace length bytes in returned domain names to - periods itself rather than relying on NSE's old behavior of replacing non- - printable characters with periods. Thanks to Rob Nicholls for reporting the - problem. [Kris] +o Updated zoneTrans.nse to replace length bytes in returned domain + names to periods itself rather than relying on NSE's old behavior of + replacing non- printable characters with periods. Thanks to Rob + Nicholls for reporting the problem. [Kris] o Changed the order preference of timing ping propes. [Michael] -o Enabled nmap to switch between multiple types of timing pings during port - scanning. [Michael] +o Enabled nmap to switch between multiple types of timing pings during + port scanning. [Michael] -o Some Zenmap crashes have been fixed: trying to "refresh" the output of - a scan loaded from a file, and trying to re-save a file loaded from - the command line in some circumstances. [David] +o Some Zenmap crashes have been fixed: trying to "refresh" the output + of a scan loaded from a file, and trying to re-save a file loaded + from the command line in some circumstances. [David] o The file selector in Zenmap now remembers what directory it was last looking at. [David] -o Zenmap defaults to showing files matching both *.xml and *.usr in the - file selector. Previously it only showed those matching *.usr. +o Zenmap defaults to showing files matching both *.xml and *.usr in + the file selector. Previously it only showed those matching *.usr. -o Nmap avoids printing the sending rate in bytes per second during a TCP - connect scan. Because the number of bytes per probe is not known, it used to - print - Current sending rates: 11248.85 packets / s, 0.00 bytes / s. - Now it will print simply - Current sending rates: 11248.85 packets / s. +o Nmap avoids printing the sending rate in bytes per second during a + TCP connect scan. Because the number of bytes per probe is not + known, it used to print Current sending rates: 11248.85 packets / s, + 0.00 bytes / s. Now it will print simply Current sending rates: + 11248.85 packets / s. o Nmap's makefile will now install menu items for launching zenmap as a privileged or non-privileged process on linux. This will mainly @@ -118,7 +121,8 @@ o Nmap's makefile will now install menu items for launching zenmap as o Nmap will no longer misreport a localhost-responce during -PN scans [Michael] -o There is a new --max-rate option complementary to --min-rate. [David] +o There is a new --max-rate option complementary to + --min-rate. [David] Nmap 4.68 [2008-6-28] @@ -217,8 +221,8 @@ o Improved the mapping from dnet device names (like eth0) and WinPcap with --iflist, and the change should make Nmap more likely to work on Windows machines with unusual networking configurations. [David] -o Service fingerprints in XML output are no longer be truncated to 2kb. - [Michael] +o Service fingerprints in XML output are no longer be truncated to + 2kb. [Michael] o Some laptops report the IP Family as NULL for disabled WiFi cards. This could lead to a crash with the "sin->sin_family == AF_INET6" @@ -228,21 +232,21 @@ o Some laptops report the IP Family as NULL for disabled WiFi cards. o On systems without the GNU getopt_long_only() function, Nmap has its own replacement. That replacement used to call the system's getopt() function if it exists. But the AIX and Solaris getopt() - functions proved insufficient/buggy, so Nmap now always calls its own - internal getopt() now from its getopt_long_only() + functions proved insufficient/buggy, so Nmap now always calls its + own internal getopt() now from its getopt_long_only() replacement. [David] o Integrated several service match lines from Tom Sellers. o An error was fixed where Zenmap would crash when trying to load from - the recent scans database a file containing non-ASCII characters. The - error looked like + the recent scans database a file containing non-ASCII + characters. The error looked like pysqlite2.dbapi2.OperationalError: Could not decode to UTF-8 column 'nmap_xml_output' with text '