Re: Unnecessary TCP retries ?

[Martin Mačok <martin.macok () underground cz>]

On Tue, Jun 14, 2005 at 02:25:27PM -0400, Gerard Fowley wrote:

> The problem is that I am seeing repeated probes for ports that have
> already been determined to be open or closed. Here are tcpdump
> outputs taken from the source host...

Just a *blind*, quick and dirty guess: it may be caused by Nmap's
internal rate-limit detector (rld* stuff in scan_engine.cc). (Though
it could be a bug too...)

Martin Mačok
ICT Security Consultant


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev