Nmap Development mailing list archives

Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan

From: Fyodor <fyodor () nmap org>
Date: Sun, 19 Jul 2015 15:58:37 -0700

On Mon, Jul 13, 2015 at 9:15 PM, Daniel Miller <bonsaiviking () gmail com>
wrote:

Using the fingerprint file from p0f [2], it is clear that the 1024 value
Nmap uses is unique among TCP clients. A much better choice might be 65535,
which shows up in 41 signatures (more than any other single value),
including FreeBSD, Windows XP, and OS X.


Good data! Changing the Window to 65,535 sounds fine to me.

-Fyodor

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread:

[RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Bernhard Thaler (Jul 08)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan David Fifield (Jul 08)
  - Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Daniel Miller (Jul 08)
- Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Fyodor (Jul 12)
  - Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Jacek Wielemborek (Jul 13)
  - Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan bernhard . thaler (Jul 13)
    - Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Daniel Miller (Jul 13)
    - Re: [RFC PATCH] Add --win option to set receive window size in TCP SYN Scan Fyodor (Jul 19)