Home page logo

nmap-dev logo Nmap Development mailing list archives

Nmap Question
From: IndianZ <indianz () indianz ch>
Date: Sun, 2 May 2004 21:49:43 +0200

Hi List

Is the attached table correct? It's about the answers of packets (when meeting 
open/closed/filtered ports) by scanning them with nmap. And can you tell why 
it's different (or detected different) when scanning port <1024 or >1024?

                                <1024                                   >1024   
                UDP                     TCP                     UDP                     TCP

OPEN    Nothing or      syn/ack         Response        syn/ack

CLOSED  ICMP Port       Reset           ICMP Port       Reset
                Unreachable                             Unreachable     

FILTER  Admin prohib    Nothing or      Nothing         Nothing or
                or ICMP Host    Admin prohib                            Admin prohib

GreetZ from IndianZ

mailto:indianz () indianz ch

For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org

  By Date           By Thread  

Current thread:
  • Nmap Question IndianZ (May 02)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]