RE: eEye Digital Security ports nmap to Windows NT

[Andy Lutomirski <Luto () MailAndNews com>]

See Q175523.  (for those Windows-illiterate folks, this is a KB article 
available at support.microsoft.com.)  This is most likely the problem.  Try 
rebenchmarking w/ this registry value set to 0.

Andy

> ===== Original Message From "Ryan Permeh" <talis () millcomm com> =====
> yeah, we've seen some serious slowdown in the tcp scanning, and i am looking
> at a way to speed this up.  the big problem in this scan is the overhead
> with establishing a full tcp session, followed by windows tcp RST packets.
> i've syn scanned hosts on the local network in less than a second, and all
> the syn code uses direct calls to the ndis driver, competely subverting the
> winsock layer, giving it a serious speed advantage.  However, we are working
> on a service release that should fix some problems that have come in.  i'm
> not certain on a timeline for this release, due to other work related
> concerns, but it is coming, along with (probably) a gui frontend, win  9x
> port, and a nmapnt specific mailing list.
>
> hope this helps
> Signed,
> Ryan
> eEye Digital Security Team
> http://www.eEye.com
>
>
> ----- Original Message -----
> From: <atw () jenkon com>
> To: <nmap-hackers () insecure org>
> Sent: Tuesday, July 18, 2000 7:55 AM
> Subject: RE: eEye Digital Security ports nmap to Windows NT
>
>
> > > I don't have a working Windows box at the moment, but when I do I will
> > > certainly check it out and probably merge the port into the mainstream
> > > tree so it doesn't fall behind.  Also, it is critical that I run some
> > > benchmarks.  If the NT version is as fast or faster than UNIX, I have
> some
> > > very important optimizing to do :).
> >
> > It doesn't appear to be an issue...
> >
> > D:\Nmapnt>nmapnt -sT -v -O 216.xxx.xxx.xxx
> > Starting nmapNT V. 2.53 by ryan () eEye com
> > eEye Digital Security ( http://www.eEye.com )
> > based on nmap by fyodor () insecure org  ( www.insecure.org/nmap/ )
> > .
> > .
> > .
> > Nmap run completed -- 1 IP address (1 host up) scanned in 1520 seconds
> >
> >
> > user@server:/> nmap -sT -v -O 216.xxx.xxx.xxx
> > Starting nmap V. 2.12 by Fyodor (fyodor () dhp com, www.insecure.org/nmap/)
> > .
> > .
> > .
> > Nmap run completed -- 1 IP address (1 host up) scanned in 3 seconds
> >
> > Andy Wilson
> >
> > --------------------------------------------------
> > For help using this (nmap-hackers) mailing list, send a blank email to
> > nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).
>
>
> --------------------------------------------------
> For help using this (nmap-hackers) mailing list, send a blank email to
> nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).

-------
Sent by Andy remotely


--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to 
nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).