Can I assume that NVT ASCII strings are no longer than 1024 bytes? Can I assume that server responses over the control connection are no longer than 1024 bytes?
A. You may assume that NVT strings read over the control connection are no longer than this length (i.e. a single line of a response), and you do not need to handle servers that do not meet this assumption. However, the total length of a server response (e.g. a greeting) may exceed this length. Note that strings sent over the data connection should not be limited, since a LIST string can be of arbitrary length.