Hi to everyone,

I use NSE script "wsdd-discover" to retrieve ONVIF endpoints, and it does not show up anything:

C:>nmap -sU -p 3702 --script wsdd-discover 192.168.99.123
Starting Nmap 7.97 ( https://nmap.org ) at 2025-05-27 15:01 +0200
Nmap scan report for 192.168.99.123
Host is up (0.23s latency).

PORT STATE SERVICE
3702/udp open|filtered ws-discovery

Nmap done: 1 IP address (1 host up) scanned in 8.18 seconds

However, as it can be seen in trace and debug files in attachment, there are many ONVIF endpoints (which I discovered with other tools. For example:

wsd:XAddrshttp://192.168.250.150:80/onvif/device_service http://192.168.1.240:80/onvif/device_service</wsd:XAddrs>

So, Nmap sees them, but does not show them in output. Bug ?

Also, it does not seem related to Nmap version, as I had seen this bug in previous version but did not get the time to report it.

Thank you
Fred

debug Nmap.txt

trace Nmap.txt