Home page logo

Nmap Announce mailing list archives

Re: UDP port scanning...
From: Darren Reed <avalon () coombs anu edu au>
Date: Thu, 10 Feb 2000 10:23:42 +1100 (Australia/NSW)

I must have written my original email in French - it seems like only 1 in
10 people (or therebaouts) actually understood what I wrote.  Or maybe the
1:10 ratio reflects the number of script kiddies on this list ;-)


In some mail from Simple Nomad, sie said:

Yes but if the firewall or router is simply dropping the packets (common
with filter-based rules) then all UDP ports will show up as open, when in
fact they are not.

-         Simple Nomad          -  No rest for the Wicca'd  -
-      thegnome () nmrc org        -        www.nmrc.org       -
-  thegnome () razor bindview com  -      www.bindview.com     -

On Wed, 9 Feb 2000, Darren Reed wrote:

It maybe worthwhile putting in a note when doing UDP scan that the
"open ports" are generated when no packets are received back.  Too
many lay people seem to assume that "all UDP ports open" as reported
by nmap is a `bad thing' when in fact it's a good thing(tm).


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]