Nmap Development mailing list archives

Re: "Strange connect error" when using -sV


From: monzy merza <monzymerza () gmail com>
Date: Fri, 3 Feb 2006 08:10:27 -0700

On 2/2/06, Martin Mačok <martin.macok () underground cz> wrote:
On Thu, Feb 02, 2006 at 11:29:41PM -0700, monzy merza wrote:

did a few more runs with nmap 4. turns out that if i use -T2 i don't
see the problem. recreated the problem with -T3, -T4.

-T2 doesn't scan ports in parallel but -T3+ does, anyway... If there
are for example reverse telnet services on the Cisco, they often
doesn't allow more than one connection to a port simultaneously.

these Ciscos are configured to allow upto 5 simultaneous connections.
when i run this scan against just one ip, instead of the /24 i don't
see the error.  but anything > 1 reproduces this problem.

here is some more info on the linux hosts running nmap

nmap 4 -- redHat 3.2.3-49, linux 2.4.21-27.0.2 (elsmp), gcc 3.2.3
nmap 3.99 -- slackware 10.1. linux 2.6.11.2, gcc 3.3.4


Martin Mačok
ICT Security Consultant


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev


Current thread: