Security Basics mailing list archives
XMAS Scanning
From: Bhargav Bhikkaji <bbhikkaji () yahoo co in>
Date: 23 Jan 2004 06:47:26 -0000
Hi, I am trying to understand the working of few port scanning methods using TCP. There are few methods like SYN Scan,FIN/NULL Scan, XMAS Scan and Zombie Scan. Based on my understanding. "If a packet is sent to a closed port with any control bit except RST, then the port will send a RST packet". Now my question is, why does XMAS scanning sets control bit to FIN/URG/PSH. Is it not enough to set any one of the three control bit ? Thanks Bhargav --------------------------------------------------------------------------- Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any course! All of our class sizes are guaranteed to be 10 students or less. We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, and many other technical hands on courses. Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off any course! ----------------------------------------------------------------------------
Current thread:
- XMAS Scanning Bhargav Bhikkaji (Jan 26)
- Re: XMAS Scanning Erich Buri (Jan 27)
- <Possible follow-ups>
- RE: XMAS Scanning Fields, James (Jan 27)