Home page logo
/

basics logo Security Basics mailing list archives

Re: IPID sequencability class is: All zeros (Nmap Idle Scan with zombiehost)
From: infolookup () gmail com
Date: Sat, 8 Dec 2007 22:54:17 +0000

Not to sound rude but I think you are better off going to the authors website www.insecure.org, there is also a mailing 
list just for the app.

What version are you runing I know 3.93 had this issue
Sent via BlackBerry from T-Mobile

-----Original Message-----
From: "Simon Jolle \"sjolle\"" <urandomdev () gmail com>

Date: Sat, 08 Dec 2007 22:14:46 
To:security-basics () securityfocus com
Subject: IPID sequencability class is: All zeros (Nmap Idle Scan with zombie
 host)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Security specialists

I try to spoof packets from another host (in my lab environment). Its a
Windows XP SP2 machine. In nmap this feature is called idle scan.

# nmap -P0 -sI x.x.x.x:443 example.com
Starting Nmap 4.20 ( http://insecure.org ) at 2007-12-08 22:03 CET 
Idlescan zombie 192.168.111.113 (192.168.111.113) port 443 cannot be
used because IPID sequencability class is: All zeros.  Try another
proxy. QUITTING!

What does the error message "port x cannot be used because IPID
sequencability class is: All zeros" mean?

I tried several different ports.

cheers
Simon
- --
actually, I think Windows Vista has done more than virtually any OS
release to promote the use of Linux (Slashdot Kommentar, 4. Oct 07)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHWwk2EMN/lNE/wrwRAi9VAJ9iRTJXLzhFNTLeWX82k7fWb5kBnQCfVU1V
R9J5j5CjxA2tlZp5XW95WVU=
=hB3C
-----END PGP SIGNATURE-----

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]