question about randomize-hosts and -PS

["Douglas F. Calvert" <douglasfcalvert () gmail com>]

Hello,
  I am using randomize-hosts and -PS80,443,3389 and I noticed that
nmap will randomize the order of the hosts but it does not randomize
the ports and hosts. For example nmap does something like:

scanner:12345 -> host1:80
scanner:12345 -> host1:443
scanner:12345 -> host1:3389
scanner:12344 -> host2:80
scanner:12344 -> host2:443
scanner:12344 -> host2:3389
scanner:12347 -> host3:80
scanner:12347 -> host3:443
scanner:12347 -> host3:3389
scanner:12346 -> host4:80
scanner:12346 -> host4:443
scanner:12346 -> host4:3389

Is there an option to accomplish something along the lines of:

scanner:12345 -> host34:80
scanner:12345 -> host122:443
scanner:12345 -> host55:80
scanner:12344 -> host13:3389
scanner:12344 -> host223:443
scanner:12344 -> host21:3389
scanner:12347 -> host3:80
scanner:12347 -> host332:443
scanner:12347 -> host31:3389
scanner:12346 -> host14:80
scanner:12346 -> host4:80
scanner:12346 -> host2:3389

I also noticed that nmap appears to use the same tcp.src port and/or
very similar src.port for the host discovery process. Is there a
reason for this? Am I missing an obvious switch to change this
behavior?


-- 
--dfc
douglasfcalvert () gmail com

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org