mailing list archives
Re: Nmap says Host down when actually host is up.
From: "Kris Katterjohn" <katterjohn () gmail com>
Date: Thu, 25 Oct 2007 18:30:47 -0500
On 10/25/07, Fyodor <fyodor () insecure org> wrote:
Does anyone know if the RFC even allows a machine receiving an ICMP
echo request to respond from a different IP address? I doubt that is
allowed, but I'm not certain.
RFC 1122 Section 18.104.22.168:
The IP source address in an ICMP Echo Reply MUST be the same
as the specific-destination address (defined in Section
22.214.171.124) of the corresponding ICMP Echo Request message.
So, no, it isn't allowed technically.
Sent through the nmap-dev mailing list
Archived at http://SecLists.Org