NSE Script wsdd-discover not showing ONVIF endpoints

[sfred92]

Hi to everyone,

I use NSE script "wsdd-discover" to retrieve ONVIF endpoints, and it does not show up anything:

---

C:>nmap -sU -p 3702 --script wsdd-discover 192.168.99.123
Starting Nmap 7.97 ( https://nmap.org ) at 2025-05-27 15:01 +0200
Nmap scan report for 192.168.99.123
Host is up (0.23s latency).

PORT STATE SERVICE
3702/udp open|filtered ws-discovery

Nmap done: 1 IP address (1 host up) scanned in 8.18 seconds

---

However, as it can be seen in trace and debug files in attachment, there are many ONVIF endpoints (which I discovered with other tools. For example:

---

wsd:XAddrshttp://192.168.250.150:80/onvif/device_service http://192.168.1.240:80/onvif/device_service</wsd:XAddrs>

---

So, Nmap sees them, but does not show them in output. Bug ?

Also, it does not seem related to Nmap version, as I had seen this bug in previous version but did not get the time to report it.

Thank you
Fred

debug Nmap.txt

trace Nmap.txt

[nnposter]

A fix has been committed as r39200. Please test by replacing file nselib/wsdd.lua with an updated version from SVN or GitHub

[sfred92]

Hi,
Your fix worked perfectly fine:

---

Starting Nmap 7.97 ( https://nmap.org ) at 2025-05-29 13:51 +0200
Nmap scan report for 192.168.99.123
Host is up (0.014s latency).

PORT STATE SERVICE
3702/udp open|filtered ws-discovery
| wsdd-discover:
| Devices
| Message id: 1133a904-3c94-11f0-b764-1b886e4ab047
| Address: http://192.168.250.150:80/onvif/device_service http://192.168.1.240:80/onvif/device_service
| Type: n:NetworkVideoTransmitter tds:Device
| WCF Services
| Message id: 11341150-3c94-11f0-b764-1b886e4ab047
| Address: http://192.168.250.150:80/onvif/device_service http://192.168.1.240:80/onvif/device_service
|_ Type: n:NetworkVideoTransmitter tds:Device

Nmap done: 1 IP address (1 host up) scanned in 5.61 seconds

---

I guess you can commit it :-)

Thank you.
Fred