Re: writing brute scripts for UDP based protocols

[David Fifield <david () bamsoftware com>]

On Wed, Mar 23, 2011 at 02:39:49AM +0200, Toni Ruottu wrote:
> Without explicit login failure messages my correct login message could be
> dropped by a router and I would never know it was correct.

Knowing how much traffic to send without any feedback is hard. I don't
think there's a good general solution. In port scanning we default to 10
probes outstanding with a 1-second timeout for each. Just set a good
safe number and we can adjust it later after performance testing.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/