Pierre

Add IVRE module

2

[IVRE](https://ivre.rocks) is an [open-source](https://github.com/ivre/ivre) network recon framework. It has several use-cases, such as running your own Shodan-like service (based on powerful open-source tools such as Masscan, Nmap, ZGrab2, ZDns), passively...

portscan_tcp module: report port open when the banner is empty (e.g., tcpwrapped)

1

Since `resArray[cp]` was `""`, it evaluated to `False` and the `"TCP_PORT_OPEN"` event was not sent.

Add a final empty label (.) on DNS strings

2

The added test should make the reason of this change clear: for now, the `.qname` returned values differ between crafted and captured packets. Now the `.qname` attribute always shows the...

This will not be in release 0.9.18.

See [LeakIX/l9format](https://github.com/LeakIX/l9format). Even though it has a convenient converter ([LeakIX/l9filter](https://github.com/LeakIX/l9filter)), supporting its output might be useful.

Nmap fingerprints -> CPE, hostnames, JA3c (reverse-ssl)

[Study] How coslty would it be to store start / end times with ports in view

5

It may be interesting in a *view* result to know when a certain port has been seen open. For now, start and end times are only stored at the host...

WebUI: add Hilbert curves representation for IPv4 address space

2

See * https://blog.benjojo.co.uk/post/scan-ping-the-internet-hilbert-curve * https://github.com/measurement-factory/ipv4-heatmap

In `ivre auditdom`, "regular" dig requests (i.e., non AXFR requests) should have a timeout to speed up the execution against a large number of domains.