mailing list archives
Re: fooling nmap
From: CyberPsychotic <mlists () gizmo kyrnet kg>
Date: Fri, 11 Feb 2000 15:16:16 +0500 (KGT)
~ > would identify an nmap scan, the type of scan, the version of nmap, the OS the
~ > scan was run from, etc.
~ Marty Roesch and Fyodor are competing on this one.
I dont think we really try to compete with Fyodor's nmap, but flexresp
feature is quite funky thing to confuse nmap probes too. You need to to
`fix' your kernel though to not to respond these itself. (that's what is
being looked into too to make it automagically.. heh heh..)
fygrave () tigerteam net http://www.kalug.lug.net
Re: Intrusion detection question. Michel Arboi (Feb 10)
Re: Intrusion detection question. Bart van Leeuwen (Feb 10)