Nmap Development: Re: Different scan results depending on whether root or unprivileged

["Kris Katterjohn" <katterjohn () gmail com>]

On 1/10/07, Eddie Bell <ejlbell () gmail com> wrote:
> On 10/01/07, Tim Edwards <tkedwards () fastmail com au> wrote:,
> > Does anyone know why these results would be different?
> I'm guessing but I presume it is because unprivileged ping scan uses
> connect(), so it has to establish a full connection to determine if a
> host is up. Root ping scan uses raw packets and nmap assumes a host it
> up if it gets any reply to its probe.
>
> To be sure, run it with --packet-trace and you can see what is happening.
>
>   - ejlb
But -sT is used on both scans.

-Kris

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org