Powered by Invision Power Board


  Reply to this topicStart new topicStart Poll

> nmap - SYN stealth, issues with repeated attempts
pravstar
Posted: Oct 16 2003, 09:29 AM
Quote Post


Newbie
*

Group: Members
Posts: 1
Member No.: 106
Joined: 16-October 03



I see that while using the -sS option to stealth scan per se a particular TCP port, nmap attempts to send atleast 6 TCP packets ( with varying seq nos , window size etc ) to the same ip address . When the number of ip addresses being scanned is a large number ....it becomes very problamatic to finish the scan. Is there any way of curtailing this repeated packets?
These packets were picked up by a local sniffer ...and effectively makes each scan to consume atleast 20 seconds.
PMEmail Poster
Top
fishsponge
Posted: Oct 16 2003, 10:13 AM
Quote Post


Administrator
********

Group: Admin
Posts: 679
Member No.: 1
Joined: 13-February 03



i'm not too sure, but i think it has to do this to make it stealth because if it just sent one packet, then the remote machine would know what was happening and where it was being sent from. If nmap sends several different packets then it can confuse the remote machine so it doesn't know it's you.

i think this is something along the right lines anyway...
PMEmail PosterUsers WebsiteICQAOLYahooMSN
Top
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
« Next Oldest | Networking & TCP/IP (including IPv6) | Next Newest »

Topic Options Reply to this topicStart new topicStart Poll

 



[ Script Execution time: 0.1212 ]   [ 12 queries used ]   [ GZIP Enabled ]




Partners: Cambridge Plus :: <Link Available> :: 3D Mechanical Design :: <Link Available>
Unix Man Pages / Linux Man Pages :: HiFi Forum :: SIP VoIP Phone & Provider Reviews :: UNIX/Linux Forum Archives

More info on advertising on Unix/Linux Forum