Home page logo

nmap-dev logo Nmap Development mailing list archives

Re: Nmap says Host down when actually host is up.
From: "Kris Katterjohn" <katterjohn () gmail com>
Date: Thu, 25 Oct 2007 18:30:47 -0500

On 10/25/07, Fyodor <fyodor () insecure org> wrote:

Does anyone know if the RFC even allows a machine receiving an ICMP
echo request to respond from a different IP address?  I doubt that is
allowed, but I'm not certain.


RFC 1122 Section

The IP source address in an ICMP Echo Reply MUST be the same
as the specific-destination address (defined in Section of the corresponding ICMP Echo Request message.

So, no, it isn't allowed technically.

Kris Katterjohn

Sent through the nmap-dev mailing list
Archived at http://SecLists.Org

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]