Home page logo

nmap-dev logo Nmap Development mailing list archives

closed vs filtered in UDP scan
From: Paul Johnston <paul () westpoint ltd uk>
Date: Tue, 07 Oct 2003 17:47:30 +0100


What exactly does open/closed/filtered mean in a UDP scan? I thought the test was just to send to the UDP port, and look for an icmp port unreachable message. If it appears the port is closed, otherwise we guess that it's open. Where does filtered come from?



Paul Johnston
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paul () westpoint ltd uk
web: www.westpoint.ltd.uk

For help using this (nmap-dev) mailing list, send a blank email to nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]