| UNIX/Linux Forum Archives · Rules and Guidelines · Disclaimer |
Help
Search
Members
Calendar
|
| Welcome Guest ( Log In | Register ) | Resend Validation Email |
![]() ![]() ![]() |
| pravstar |
Posted: Oct 16 2003, 09:29 AM
|
|
Newbie ![]() Group: Members Posts: 1 Member No.: 106 Joined: 16-October 03 |
I see that while using the -sS option to stealth scan per se a particular TCP port, nmap attempts to send atleast 6 TCP packets ( with varying seq nos , window size etc ) to the same ip address . When the number of ip addresses being scanned is a large number ....it becomes very problamatic to finish the scan. Is there any way of curtailing this repeated packets?
These packets were picked up by a local sniffer ...and effectively makes each scan to consume atleast 20 seconds. |
| fishsponge |
Posted: Oct 16 2003, 10:13 AM
|
|
Administrator ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Admin Posts: 679 Member No.: 1 Joined: 13-February 03 |
i'm not too sure, but i think it has to do this to make it stealth because if it just sent one packet, then the remote machine would know what was happening and where it was being sent from. If nmap sends several different packets then it can confuse the remote machine so it doesn't know it's you.
i think this is something along the right lines anyway... |
![]() |
![]() ![]() ![]() |