Re: decoy scan: no decoy packages

[mgrd <subscriptions () gerdau freeshell org>]

sorry for the very long delay .. I was disconnected from the Internet 
for a while.

Yes, the decoy IP addresses were from the same subnet. This might 
explain it.

Craig Humphrey wrote:
> The decoy IP addresses you used, where they of the same subnet as either
> of the scanner/target?
>
> If they were from the same subnet as the target, it's quite possible
> that the ISP of the scanner, wont route them.
>
>
> > -----Original Message-----
> > From: mgrd [mailto:subscriptions () gerdau freeshell org] 
> > Sent: Tuesday, December 14, 2004 1:15 PM
> > To: nmap-dev () insecure org
> > Subject: Re: decoy scan: no decoy packages
> >
> >
> > Hmm, hard to say except:
> > - both systems have public/official IP addresses
> > - using different providers (target: dsl ; source: analog-dialup)
> >
> > I think I'll run the same on a local network on the same segment.
>
>
> ---------------------------------------------------------------------
> For help using this (nmap-dev) mailing list, send a blank email to 
> nmap-dev-help () insecure org . List archive: http://seclists.org

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org