Nmap Development mailing list archives
Re: pcap processing
From: Robert Kat <r33dtard () gmail com>
Date: Thu, 23 Sep 2010 10:48:13 -0400
Could it be something in my TCP or IP header thats causing this issue. I just threw them together by looking at the ipidseq script and what telnet was using in wireshark. Is there a flag that I should be setting/unsetting? I hate to have to create a firewall rule every time I want to run this scan. On Thu, Sep 23, 2010 at 9:31 AM, Ron <ron () skullsecurity net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The RST packet is most likely being sent out by your OS. The easiest way to solve it might be with a firewall rule that prevents the RST from being sent. On Linux that's pretty straight forward, on Windows not so much. :) Ron On Thu, 23 Sep 2010 07:43:40 -0400 Robert Kat <r33dtard () gmail com> wrote:Morning! I am trying to generate a HTTP GET request to an apache web server by using the pcap interface of nmap. I am able to send the server the SYN packet and it replys with the SYN/ACK (verified via Wireshark). But when I get the SYN/ACK from the server, someone sends out an RST which messes with my ACK and subsequent sends. Is nmap sending this out for me? If so why and how can I prevent it. I have looked at the path-mtu, ipidseq scripts as examples they just are not doing what I am trying to do. Yes I know that I can use the connect and send methods and not worry about the low-level packet stuff but that defeats me having some fun and learning. TIA, Tim _______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkybVsUACgkQ2t2zxlt4g/Q8FACeO9fUsKmzIZmy1E66fI5JQS+i YhYAn259bZu8raLXewavd78ZYC/9N3tu =XAp9 -----END PGP SIGNATURE-----
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- pcap processing Robert Kat (Sep 23)
- Re: pcap processing Ron (Sep 23)
- Re: pcap processing Robert Kat (Sep 23)
- Re: pcap processing Kris Katterjohn (Sep 23)
- Re: pcap processing Robert Kat (Sep 23)
- Re: pcap processing Ron (Sep 23)
- Re: pcap processing Robert Kat (Sep 23)
- Re: pcap processing Ron (Sep 23)