Re: v3.70 syn sneaky is a self-tarpit

[Fyodor <fyodor () insecure org>]

On Sun, Sep 05, 2004 at 09:25:34PM -0700, Curtis Doty wrote:
> Something's amiss with 'sneaky' timing. More often than not, it will 
> hang indefinitely on one port; constantly SYNing but not moving on.


Thanks for the report.  This is a problem with the new "port ping"
system.  For firealled hosts, it sends a "ping" packet to the host
every five seconds or so.  But sneaky mode (-T1) causes a scan delay
of 15 seconds between probes.  So every time the 15 seconds elapsed,
another ping was due!  I have put in a fix for the next version so
that it always mixes at least 9 normal probes between pings, even for
very slow scans such as -T1.

Cheers,
Fyodor

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org