Re: Different scan results depending on whether root or unprivileged

On 10/01/07, Tim Edwards <tkedwards_at_fastmail.com.au> wrote:,
> Does anyone know why these results would be different?

I'm guessing but I presume it is because unprivileged ping scan uses
connect(), so it has to establish a full connection to determine if a
host is up. Root ping scan uses raw packets and nmap assumes a host it
up if it gets any reply to its probe.

To be sure, run it with --packet-trace and you can see what is happening.

  - ejlb

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Jan 10 2007