Nmap Development mailing list archives
Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan
From: Fyodor <fyodor () nmap org>
Date: Sun, 19 Jul 2015 15:58:37 -0700
On Mon, Jul 13, 2015 at 9:15 PM, Daniel Miller <bonsaiviking () gmail com> wrote:
Using the fingerprint file from p0f [2], it is clear that the 1024 value Nmap uses is unique among TCP clients. A much better choice might be 65535, which shows up in 41 signatures (more than any other single value), including FreeBSD, Windows XP, and OS X.
Good data! Changing the Window to 65,535 sounds fine to me. -Fyodor
_______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Bernhard Thaler (Jul 08)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan David Fifield (Jul 08)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Daniel Miller (Jul 08)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Fyodor (Jul 12)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Jacek Wielemborek (Jul 13)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan bernhard . thaler (Jul 13)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Daniel Miller (Jul 13)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Fyodor (Jul 19)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan David Fifield (Jul 08)