database wizard, performance specialist, networking guru, and code slinger.. rolled into one
2006/9/20
2006/8/3
Makefile.am, Makefile.in, Makefile文件之间关系
Makefile.am, Makefile.in, Makefile文件之间关系以及aclocal, automake, autoconf等命令作用的探究
aclocal # 产生 aclocal.m4
libtoolize --force
automake --add-missing # 根据Makefile.am生成Makefile.in
autoconf # 根据configure.in 生成configure
autoheader
为了弄清楚automake等一系列命令的作用,专门搜集并阅读了一些相关资料。并通过下面一个小例子,熟悉了一下这些GNU工具的使用:
例子:在/hello/目录下创建一个hello.c文件,并编译运行它:
#cd /hello/
(1) 编写源文件hello.c:
include
int main(int argc, char** argv)
{
printf("Hello, GNU!n");
return 0;
}
(2) #autoscan
->生成 configure.scan 和 autoscan.log
(3) 将configure.scan 修改为 configure.in:
# Process this file with autoconf to produce a configure script.
AC_INIT(hello.c)
AM_INIT_AUTOMAKE(hello, 1.0)
# Checks for programs.
AC_PROG_CC
# Checks for library functions.
AC_OUTPUT(Makefile)
(4) #aclocal
->生成 aclocal.m4 和 autom4te.cache (生成aclocal.m4的过程中涉及到configure.in)
(5) #autoconf
->生成 configure (根据 configure.in, 和 aclocal.m4)
(6) 编写Makefile.am:
AUTOMAKE_OPTIONS= foreign
bin_PROGRAMS= hello
hello_SOURCES= hello.c
(7) #automake --add-missing
->生成 Makefile.in, depcomp, install-sh, 和 missing (根据 Makefile.am, 和 aclocal.m4)
(8) #./configure
->生成 Makefile, config.log, 和 config.status
2006/7/31
troublesome template
Im not very familiar with the html code. I seldomly used these in the past.
2006/3/25
Re: NMAP Switches, -sS, -sT, etc.
I like to run nmap in phases to balance the speed and accuracy. For example, run only a SYN scan (-sS) for the 1st phase then follow up with theservice detection, OS detection, etc., scan after you discover the list of'live' devices and open ports. In my experience those extra options can add lots of time (especially when scanning large blocks, like a /16) and I liketo obtain the open port list as soon as possible to feed others tools (amap,nessus, etc.).I also always try to add options to account for current latency conditions, bandwidth availability, and the specs of the server running nmap. Thingslike: min_hostgroup, min_parallelism, min-rtt-timeout, --max-retries.An initial scan I may run with high latency (400ms rtt), lots of bandwidth, and a good server is:nmap -vv -sS -P0 -p 1-65535 -n --min_hostgroup 100 --max_retries 3--max_rtt_timeout 1250 --min_parallelism 100 -oA <output_file> <net_block>For a follow up:nmap -vv -p <open_port_list> -sT -A -P0 -n --min_hostgroup 100 --max_rtt_timeout 1250 --min_parallelism 100 -oA <output_file> -iLliveIPListAnother observation: I frequently find additional open ports when executingmultiple scans of the same blocks at different times. For whatever reason (e.g. network hiccup, target load, server load) it helps to run repeatedscans if you want to improve/have greater confidence in your results.Running a few SYN services scans in addition to your normal scans at different times may reveal a few more open ports.Tate HansenClearNet Security-----Original Message-----From: Doug Fox [mailto: dfoxsdfgsdfgadfgasdfasdfasdfadfasdfasdf168@hotmail.com]If I may, I like to poll the list what are your favorite switches when usingNMAP to conduct "intensive/comprehensive" security testing. I have been usingNMAP -vv -A -sS -O -p1-65535 -P0 -oX target.xml www.xxx.yyy.zzz.I find I got more information using -sS than -sT and requires short time.Any suggestions/comments are appreciated. Thanks,DF