Security Basics mailing list archives

XMAS Scanning


From: Bhargav Bhikkaji <bbhikkaji () yahoo co in>
Date: 23 Jan 2004 06:47:26 -0000



Hi,

I am trying to understand the working of few port scanning methods using TCP. There are few methods like SYN 
Scan,FIN/NULL Scan, XMAS Scan and Zombie Scan. 

Based on my understanding. "If a packet is sent to a closed port with any control bit except RST, then the port will 
send a RST packet". Now my question is, why does XMAS scanning sets control bit to FIN/URG/PSH. Is it not enough to set 
any one of the three control bit ?

Thanks
Bhargav

---------------------------------------------------------------------------
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any 
course! All of our class sizes are guaranteed to be 10 students or less. 
We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, 
and many other technical hands on courses. 
Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off 
any course!  
----------------------------------------------------------------------------


Current thread: