Re: nmap+V

[Paul Johnston <paul () westpoint ltd uk>]

Hi,

> Ah cool. Feature request - be able to do banner grab without doing syn 
> scan
> first to see if open since if you're going to send a syn and then 
> banner grab
> you might as well banner grab in the first place - from memory think 
> this is
> a problem with nmap+V.

The syn scan avoids the kernel's tcp implementation and does raw IP 
itself. After this, it's not generally possible to go back to using the 
kernel's tcp sockets, without starting the connection from scratch. So 
to support this nmap would need to contain either a full tcp 
implementation, or some highly platform specific hack.

It would be cool though!

Paul
--
Paul Johnston
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
England
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paul () westpoint ltd uk
web: www.westpoint.ltd.uk



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).