Nmap Development mailing list archives

Re: Call for testers: Nping 0.1BETA1 Released.


From: "Luis M." <luis.mgarc () gmail com>
Date: Sat, 08 Aug 2009 18:49:48 +0100

David Fifield wrote:


In our ping probe effectiveness research we found that if you don't have
a priori knowledge of a host, the best single non-root probes are SYN to
port 443 or 80, with 443 being slightly better. These are not bad
probes, finding about 40% of hosts that respond to any kind of probe.
ICMP echo is the only thing better; it gets about 60%.

http://www.bamsoftware.com/wiki/Nmap/EffectivenessOfPingProbes#a-20090525

David Fifield
  

Exactly. I used your research to choose some of the default values (e.g:
default UDP src and dst port). In TPC, I chose port 80 over 443 because
I think users will be a lot let surprised to see port 80 being targeted
by default.

Luis.



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

  


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: