Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: Nmap ICMP/TCP Ping Insubordination
From: Martin Mačok <martin.macok () underground cz>
Date: Mon, 7 Jun 2004 11:28:52 +0200

On Mon, Jun 07, 2004 at 11:40:59AM +0300, Noam Rathaus wrote:

I noticed a very inconsitent (with the man file) behavior of Nmap,
I run two command line:
1) ./nmap-3.50/nmap -PT80 -sP -d -n www.microsoft.com
(under the root user)
2) /nmap-3.50/nmap -PT80 -sP -d -n www.microsoft.com
(under the non-root user)

Both should do the same, TCP Ping the host www.microsoft.com,

Option -PT does not do the same for root and non root users. From the
man page, option -PT: "... spew out TCP ACK packets ... For non root
users, we use connect()".

Sniff both (1) and (2) with tcpdump/ethereal and see the
conversations.

Martin Mačok
IT Security Consultant

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault