Re: Nmap bug building task list on full port scan

[Fyodor <fyodor () insecure org>]

On Sat, Oct 18, 2008 at 11:26:04PM +0100, 7aW0lf 7aW0lf wrote:
> The Full TCP and UDP scan finds all 17:
> nmap -P0 -n -v -iL ping_sweep.ips -sU -sS -sV -O  -oA full_scan.tcp -p-
>
> Starting Nmap 4.76 ( http://nmap.org ) at 2008-10-18 16:27 IST
> Initiating SYN Stealth Scan at 16:27
> Scanning 17 hosts [65535 ports/host]
>
> If I remove -sU it only finds 4 (this is the bug):
> nmap -P0 -n -v -iL ping_sweep.ips -sV -O  -oA full_scan.tcp -p-
>
> Starting Nmap 4.76 ( http://nmap.org ) at 2008-10-18 16:30 IST
> Initiating SYN Stealth Scan at 16:30
> Scanning 4 hosts [65535 ports/host]

Nmap scans more hosts in parallel with the UDP scan because ICMP error
rate limiting is so prevalent and benefits greatly from increased scan
parallelization.  For your TCP scan, Nmap starts with a group of just
4 hosts, but it should continue scanning the rest of the hosts after
those four are complete.  Starting with a small group gets you initial
results faster.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org