Nmap Development mailing list archives
UDP pings
From: Andy Lutomirski <luto () stanford edu>
Date: Tue, 21 Jan 2003 17:53:12 -0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I noticed today that some Linksys boxes can be set to "filter" incoming TCP and UDP, but apparently will always (except for rate-limiting) return port unreachable for UDP. While this can be easily used to detect them in current build (nmap -sU -p33333 -P0 <box>), it would be nice to have it as a ping mode (nmap -sP - -P<whatever> -PU33333 <range>). This also suggests another feature idea: report which ping(s) a host responded to. For example: $ nmap -v -sP -PI -PT80 -PU33333 <range> ... Host foo (1.2.3.4) appears to be up (I, !T80). -- indicates that I worked, T80 failed, others not tried. Host bar (1.2.3.5) appears to be up (!I, U33333). ... Or, on a fancier note: $ nmap -v --ping_all_types -sP -PI -PT80 -PT113 -PU33333 <range> -- same but tries all types, even if this means multiple successes $ nmap -v --ping_all_types -sS -p80,139 -PI -PT113 -PU33333 <range> ... Host foo (1.2.3.4) appears to be up (T113, !I, U33333). <port list here> ... (I leave the utility of these commands as an exercise to the reader - -- either one would give some interesting information on a network I know of. Another peculiarity of said network would then allow me to ..., but that's another story :) Andy -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQGVAwUBPi35hao99ZE4eJRKAQKa0gv8Cv058pPMpKepp072CSNv4R4bU8tWMPs+ gYYpqoV96IFreG9MkFHCEbiIRSExWHE0PeokFjJrRqyFjefZ7xEEFtODzHAJ3spM NYL/OBBBFvPXF0okfMMRLIkoLtnfSRDcD1wkGFO6WTK3IDrv8zcxxaFLaqOfGYo8 rZk1E0A6V5VLjx+o8QAccgPEAeUSDKqDsUM2bJiGhTK+RLWukz3hH8/bjSKd0Azy dvkE7pnN0zQZt52LFvbD4rSsfGNXnMKdJmkxwsd8UNo/hXoYG91euekK1BscLRE3 kmIUozaEsutd+qYqbSul5RmBSwQ8nl+UR2c6o45WEEyvbVcjr3y9G4jZJo4MwJc/ TghrjkAW5WER0+JlGGw9j4wC5rmV7nt6D7Lhbj9hC+Y7ibAduNNCj0DikLsd6wo4 d350zfZzFcp7QGK8RehmP3DI11/C/+iui7q2Yya7ZqpMM2zcKvfDzqP8qee1sKmD dxNtc+09bT1peH/O04Bz7O1i3sf+LGV9 =rH3d -----END PGP SIGNATURE----- ---------------------------------------------------------------------For help using this (nmap-dev) mailing list, send a blank email to nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).
Current thread:
- UDP pings Andy Lutomirski (Jan 22)