Re: Nmap 3.80 preview

[Andreas Ericsson <ae () op5 se>]

Fyodor wrote:
> On Sun, Feb 06, 2005 at 03:38:03PM +0100, Martin Ma?ok wrote:
>
> > On Sat, Feb 05, 2005 at 03:17:16PM -0800, Fyodor wrote:
>
>
> > Actually, your version does mtu=8 for -f and mtu=8 for -ff too.
>
>
> Oops.  You're right.  I covered the "-f" and "-f -f" cases, but forgot
> to adjust the separate -ff flag.  Fixed for 3.81.
>
>
> > My original version was doing 8 for -ff and 16 for -f. I recommend
> > this patch to get mtu=8 for '-ff', '-f -f' or '--mtu 8' and mtu=16 for
> > '-f' or '--mtu 16':
>
>
> I have a slight preference for having one -f do the smallest fragment
> size (8) with the mtu getting bigger for each additional -f (so 16 for
> -ff).  So this is what I'll do for Nmap 3.81 unless there is a good
> reason for doing the opposite?

I would say the other way around is more intuitive. It feels logical 
that -f means "fragment" and -ff (or -f -f) means "fragment more/more 
fragments". Perhaps there are other issues, but as always on monday 
mornings I speak before I can think things through.

> Cheers,
> -F
>
>
> ---------------------------------------------------------------------
> For help using this (nmap-dev) mailing list, send a blank email to 
> nmap-dev-help () insecure org . List archive: http://seclists.org

--
Andreas Ericsson                   andreas.ericsson () op5 se
OP5 AB                             www.op5.se
Lead Developer

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org