someone please explain this?!

["Mike ." <dmciscobgp () hotmail com>]

hello


so explain this because it makes no sense. i scanned 1 address today with a UDP/Svc scan. i know it only has 1 service 
open (dns-sd).  look at this output:


Service scan sending probe SIPOptions to 192.168.0.10:139 (udp)
Service scan sending probe Help to 192.168.0.10:158 (udp)
Service scan sending probe SIPOptions to 192.168.0.10:88 (udp)
Service scan sending probe SIPOptions to 192.168.0.10:123 (udp)
Service scan sending probe SIPOptions to 192.168.0.10:158 (udp)
Service scan sending probe Sqlping to 192.168.0.10:7 (udp)
Service scan sending probe Sqlping to 192.168.0.10:9 (udp)
Service scan sending probe Sqlping to 192.168.0.10:17 (udp)
Service scan sending probe Sqlping to 192.168.0.10:19 (udp)
Service scan sending probe Sqlping to 192.168.0.10:49 (udp)
Service scan sending probe Sqlping to 192.168.0.10:53 (udp)
Service scan sending probe Sqlping to 192.168.0.10:67 (udp)
Service scan sending probe Sqlping to 192.168.0.10:68 (udp)
Service scan sending probe Sqlping to 192.168.0.10:69 (udp)
Service scan sending probe Sqlping to 192.168.0.10:80 (udp)
Service scan sending probe Sqlping to 192.168.0.10:111 (udp)



i used the -F first when i started. ok, fine. but would it not make more sense to actually FIRST see what we have open 
THEN start the service grinding at the end? this just seems pointless going after ports not even open! the only port 
open att was 5353. or am i missing something?


thanks

Mike

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/