Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Development: Re: Nmap question (timeout versus scan-delay)

Re: Nmap question (timeout versus scan-delay)

From: Martin Mačok <martin.macok_at_underground.cz>
Date: Wed, 4 Oct 2006 23:31:29 +0200

On Wed, Oct 04, 2006 at 04:24:11PM -0400, John P. Wilson wrote:

> I am guessing that timeout is the delay used before retransmitting
> to the same port and scan-delay is the delay when you are finished
> investigating one port before scanning the next port?

No, it's a delay between single probes (there may be more than one
probe to a single port) not between investigations of different ports.

"Timeout" is the maximum time it will be waited for eventual probe
reply. Also note that more than one probe can (and by default it will)
be sent during that period (more ports can be probed in parallel).
"Scan-delay" is the minimal time between two probes (the scan will be
serialized).

The main difference is that when the reply arrives before "timeout"
then the next probe will be sent immediately (well, not exactly in all
cases...) but with "scan-delay" it will wait the whole delay period
anyway before sending another probe.

I hope it's clearer now but feel free to ask again :-)

Martin Mačok
ICT Security Consultant

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Oct 04 2006

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]