See Q175523. (for those Windows-illiterate folks, this is a KB article
available at support.microsoft.com.) This is most likely the problem. Try
rebenchmarking w/ this registry value set to 0.
Andy
>===== Original Message From "Ryan Permeh" <talis_at_millcomm.com> =====
>yeah, we've seen some serious slowdown in the tcp scanning, and i am looking
>at a way to speed this up. the big problem in this scan is the overhead
>with establishing a full tcp session, followed by windows tcp RST packets.
>i've syn scanned hosts on the local network in less than a second, and all
>the syn code uses direct calls to the ndis driver, competely subverting the
>winsock layer, giving it a serious speed advantage. However, we are working
>on a service release that should fix some problems that have come in. i'm
>not certain on a timeline for this release, due to other work related
>concerns, but it is coming, along with (probably) a gui frontend, win 9x
>port, and a nmapnt specific mailing list.
>
>hope this helps
>Signed,
>Ryan
>eEye Digital Security Team
>http://www.eEye.com
>
>
>----- Original Message -----
>From: <atw_at_jenkon.com>
>To: <nmap-hackers_at_insecure.org>
>Sent: Tuesday, July 18, 2000 7:55 AM
>Subject: RE: eEye Digital Security ports nmap to Windows NT
>
>
>> > I don't have a working Windows box at the moment, but when I do I will
>> > certainly check it out and probably merge the port into the mainstream
>> > tree so it doesn't fall behind. Also, it is critical that I run some
>> > benchmarks. If the NT version is as fast or faster than UNIX, I have
>some
>> > very important optimizing to do :).
>>
>> It doesn't appear to be an issue...
>>
>> D:\Nmapnt>nmapnt -sT -v -O 216.xxx.xxx.xxx
>> Starting nmapNT V. 2.53 by ryan_at_eEye.com
>> eEye Digital Security ( http://www.eEye.com )
>> based on nmap by fyodor_at_insecure.org ( www.insecure.org/nmap/ )
>> .
>> .
>> .
>> Nmap run completed -- 1 IP address (1 host up) scanned in 1520 seconds
>>
>>
>> user_at_server:/> nmap -sT -v -O 216.xxx.xxx.xxx
>> Starting nmap V. 2.12 by Fyodor (fyodor_at_dhp.com, www.insecure.org/nmap/)
>> .
>> .
>> .
>> Nmap run completed -- 1 IP address (1 host up) scanned in 3 seconds
>>
>> Andy Wilson
>>
>> --------------------------------------------------
>> For help using this (nmap-hackers) mailing list, send a blank email to
>> nmap-hackers-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
>>
>>
>
>
>--------------------------------------------------
>For help using this (nmap-hackers) mailing list, send a blank email to
>nmap-hackers-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
-------
Sent by Andy remotely
--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to
nmap-hackers-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
Received on Jul 19 2000