Re: Different scan results depending on whether root or unprivileged

On 1/10/07, Eddie Bell <ejlbell_at_gmail.com> wrote:
>
> On 10/01/07, Tim Edwards <tkedwards_at_fastmail.com.au> wrote:,
> > Does anyone know why these results would be different?
>
> I'm guessing but I presume it is because unprivileged ping scan uses
> connect(), so it has to establish a full connection to determine if a
> host is up. Root ping scan uses raw packets and nmap assumes a host it
> up if it gets any reply to its probe.
>
> To be sure, run it with --packet-trace and you can see what is happening.
>
> - ejlb
>
>
But -sT is used on both scans.

-Kris

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Jan 10 2007