Penetration Testing mailing list archives
RE: Fast UDP scan
From: "Strykar" <str () hackerzlair org>
Date: Wed, 22 Aug 2007 03:44:28 +0530
Read this for more clarity: http://seclists.org/pen-test/2004/Aug/0040.html Also try Unicornscan - http://rapturesecurity.org/jack/unicornscan-0.4.6e.tar.gz - S -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Strykar Sent: Wednesday, August 22, 2007 2:40 AM To: pen-test () securityfocus com Cc: 'Attari Attari' Subject: RE: Fast UDP scan Hi, There is no such thing as a fast UDP scan. A UDP scan WILL take several hours even on a fast LAN as the target operating system will limit its ICMP reply rate. You can change this via /proc in linux. You have other factors when running UDP scans over the Internet like intermediate routers (read ISP mostly) and their UDP (oft dumb) filtering policies. You need to understand how datagrams are sent to each port being tested in a UDP scan and the responses to them thereof. The services running on the target machine will determine if you receive a response, or not, as closed UDP ports should return an ICMP port unreachable message. Try: nmap -sU -T Polite -p- -P0 xxx.yyy.zzz.aaa for accurate results, but don't hold your breath, they will take a long time. The "-p-" switch is the same as -p 1-655535. Also, running parallel scans will help, as long as they're not against the same target. Patience is key with UDP scans, where's the fire? Read the extremely well laid out: http://insecure.org/nmap/nmap_doc.html - S -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Attari Attari Sent: Tuesday, August 21, 2007 12:03 PM To: pen-test () securityfocus com Subject: Fast UDP scan Hi Group: Is there a way to increase speed of UDP scan? I'm running a full UDP scan since 3 days on 3 IP addresses and it is still not complete. I gave following command: nmap -sU -p1-65535 -P0 xxx.yyy.zzz.aaa One way I can think of is is running parallel nmap scans by dividing ports like: nmap -sU -p1-30000 -P0 xxx.yyy.zzz.aaa nmap -sU -p30000-65535 -P0 xxx.yyy.zzz.aaa Would appreciate some inputs on this. Regards Once upon a time there was 1 GB storage in your inbox. To know the happy ending go to http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------ ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------ ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Fast UDP scan Attari Attari (Aug 21)
- Re: Fast UDP scan Andy Ashley (Aug 21)
- Re: Fast UDP scan Bartek Przybylski (Aug 21)
- Re: Fast UDP scan US Infosec (Aug 21)
- Re: Fast UDP scan Steven Adair (Aug 21)
- Re: Fast UDP scan Jamie Riden (Aug 21)
- RE: Fast UDP scan Strykar (Aug 21)
- RE: Fast UDP scan Strykar (Aug 21)
- Re: Fast UDP scan Anders Thulin (Aug 21)
- Re: Fast UDP scan Nikhil Wagholikar (Aug 21)
- Re: Fast UDP scan Pete Herzog (Aug 21)
- Re: Fast UDP scan Jan Heisterkamp (Aug 21)
- Re: Fast UDP scan Attari Attari (Aug 25)
- RE: Fast UDP scan Strykar (Aug 26)
- RE: Fast UDP scan Henderson, Dennis K. (Aug 29)
- Re: Fast UDP scan Jan Heisterkamp (Aug 21)
- <Possible follow-ups>
- Re: Fast UDP scan Michael Mooney (Aug 22)
- Re: Fast UDP scan David Jacoby (Aug 23)