Nmap Development mailing list archives

Re: Weird Crash - "WAITING_TO_RUNNING"


From: Nathan <nathan.stocks () gmail com>
Date: Mon, 8 Nov 2010 15:08:53 -0700

On Mon, Nov 8, 2010 at 2:57 PM, Nathan <nathan.stocks () gmail com> wrote:
On Fri, Nov 5, 2010 at 6:02 PM, David Fifield <david () bamsoftware com> wrote:
If that's why I'm encountering this crash, then it looks like I could
work around it by continuing to twiddle with flags for each host until
I can either:
a) identify a set of flags that results in accurate (not
all-ports-open) results for all the hosts.  (Maybe slow things down?)

Some quick results of timing:

(-T3) -- I tried reducing the timing to the default, with no change in behavior:

$ /usr/bin/sudo /usr/bin/nmap -sS -T3 -p 1-65535 74.62.92.70 -P0 -v

Starting Nmap 5.35DC1 ( http://nmap.org ) at 2010-11-08 14:57 MST
Initiating Parallel DNS resolution of 1 host. at 14:57
Completed Parallel DNS resolution of 1 host. at 14:57, 0.03s elapsed
Initiating SYN Stealth Scan at 14:57
Scanning remote.tjwels.net (74.62.92.70) [65535 ports]
Discovered open port 80/tcp on 74.62.92.70
Discovered open port 443/tcp on 74.62.92.70
Discovered open port 3389/tcp on 74.62.92.70
Discovered open port 53/tcp on 74.62.92.70
Discovered open port 25/tcp on 74.62.92.70
Discovered open port 45428/tcp on 74.62.92.70
Discovered open port 52562/tcp on 74.62.92.70
Discovered open port 32483/tcp on 74.62.92.70
Discovered open port 15445/tcp on 74.62.92.70
[snip -- nearly every port appears open]

(-T2) -- I tried reducing the timing further to -T2, and that seemed
to help a lot!  Unfortunately, it also estimated about 8 hours to
complete.  Not so helpful, as doing "--scan-delay 1ms" results in an
accurate scan in ~7 minutes.

But "--scan-delay 1ms" only worked 40% of the time...so perhaps I
should try some different (larger?) scan-delay values on some of the
hosts where 1ms still resulted in a crash.  I'll go off and try
that...

~ Nathan
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: