Re: Crashing services with NMAP and/or SuperScan ?

[Peter Wood <peterw () firstbase co uk>]

At 11:41 23/11/2004 +0100, Petr.Kazil () eap nl wrote:
>With Superscan I seem to have blown out a switch. It went "red" on the HP
>Openview screen and didn't react to ping anymore. All the network traffic
>continued - fortunately :-) As of today the admins haven't been able to
>tell me what really happened. I haven't dared to try Superscan anymore -
>although I like it's output very much - especially it's checks for headers
>and anonymous FTP and SMTP.

I have a client who did the same thing - with an Extreme switch. I imagine 
it's a problem similar to the AIX problem, where the device allocates 
memory to each attempted port until it runs out of memory and crashes? We 
also have an ADSL router that behaves this way. The solution seems to be to 
ensure that the scanner tears down the session properly rather than 
executing a stealth scan IMHO.

regards
Pete