Nmap Development mailing list archives

Re: [PATCH] Shortening scan time with SO_DONTROUTE


From: Kris Katterjohn <katterjohn () gmail com>
Date: Thu, 01 Jan 2009 12:29:20 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/01/2009 02:10 AM, Kris Katterjohn wrote:
While my tests unfortunately can't be foolproof, I've done scans varying in
the number of ports scanned and with different timing options.  Most of the
time I've been using a Ruby script to run the different Nmaps several times
(with delays between each run) and average out the times (which I had to hack
into the XML since accurate times aren't available from what I can see).  So
while one scan can skew the results, the Nmap that utilizes SO_DONTROUTE wins
the vast majority of the time for me with averaged results and not.  While the
"win" isn't dramatic, a lot of my scans lasted less than five seconds (many
thousand ports) and the DONTROUTE version tends to improve at least 1/5 second
and sometimes more than 1/2 second better both averaged and standalone.


Oh, I of course forgot to mention that these >0.2 and >0.5 second improvements
were seen scanning only 1-2 hosts as that's all I can test with right now.  No
more 2AM emails for me... hopefully :)


Thanks,
Kris Katterjohn

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=n4Wl
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: