Idea: snmp bounce scan

[Slarty <slarty () vectrex org uk>]

Dear All,

        When reading about the "Idle" scan, it sounded to me like a different type 
of scan could be made by utilising a "zombie" running snmp.

Correct me if I'm wrong, but SNMP gives statistics on the number of packets 
received by a host, right?

If this is the case, then could nmap not do a scan similar to the "idle" 
scan, reading the SNMP packet counters between scan attempts?

Would it work?

Slarty

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).