Re: Scan 3 thousand host consume severals hour

["Ricardo A. Reis" <ricardo_bsd () yahoo com br>]

> You know you can type
>
>       nmap <scan-options> 172.16.1-3,150-163.1-254
>
> right?

hi Andreas,

Thanks for this tip, i don't know why never think in scan per
uncontinuous networks. 



> When you're using -P0 you tell nmap to not send any ICMP pings. If it 
> *does* send those pings without getting a response the host will be 
> considered down and won't be scanned at all. OTOH, if you don't send 
> PING and scan 62000 hosts that just aren't there you'll end up sending a 
> minimum of 62000 * 65535 packets that won't ever get a response. 
> Needless to say, this is a big, fat waste of time.
Yes, is a fact!

But i think after a initial timeout for unknown host, exist one feature
for adaptive timeout for minimize the time for next occurrences, similar
function a udp scan for a number of ports will be scanned.


Thanks for all per tips and explanations, i've a long test for this in
next year ;-)

Happy Natal Day and Good New Year for all.



Ricardo A. Reis
UNIFESP
Unix and Network Admin


        

        
                
_______________________________________________________ 
Yahoo! doce lar. Faça do Yahoo! sua homepage. 
http://br.yahoo.com/homepageset.html 



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev