pen-test
[Top] [All Lists]

Re: NMAP Concurrent Scans

To: Clone <en0lc@yahoo.com>
Subject: Re: NMAP Concurrent Scans
From: Tim <tim-pentest@sentinelchicken.org>
Date: Fri, 10 Aug 2007 13:46:12 -0400
Cc: pen-test@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <211117.55584.qm@web44816.mail.sp1.yahoo.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <211117.55584.qm@web44816.mail.sp1.yahoo.com>
Resent-date: Sat, 11 Aug 2007 02:19:27 -0600 (MDT)
Resent-from: pen-test-return-1078484802@securityfocus.com
Resent-message-id: <20070811081927.DA056237A8F@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Mutt/1.5.16 (2007-06-11)
> I was wondering whether running SYN, FIN, XMAS, NULL
> and ACK scans in parallel on a target generate false
> results. Since same client IP is  asking for opening &
> closing a connection on target machine will it not
>  render some ports open and other closed in the
> report?

Assuming nmap is using random source ports (which it does by default),
even if you're scanning the same port, it's relatively unlikely the
4-tuple (source ip, dest ip, source port, dest port) will be identical.
Remember, this 4-tuple is what uniquely indentifies a connection.

HTH,
tim

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>