path inspection

["testic" <testic () testic demon co uk>]

I think thats a good idea, although when scanning there will most likely be
an awful lot of 'closed' ports so you would have to specify which port to
use to measure the distance of dropped packets. Perhaps an option similar
to -p where you can specify a range of ports to test, as indeed it may be
the case where different service are dropped at different machines.

Also, this technique could be used for 'open' and 'filtered' ports also, it
may be that you could reveal different machines behind a gateway perhaps.
The distance to the service could be displayed in the summary next to the
service name/port number.




http://www.testic.co.uk


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org