Re: Fragscan not working?

[Michael Pattrick <mpattrick () rhinovirus org>]

On Thu, Apr 8, 2010 at 1:02 AM, Fyodor <fyodor () insecure org> wrote:
> On Wed, Apr 07, 2010 at 06:49:40PM +0000, Brandon Enright wrote:
> > On Wed, 7 Apr 2010 09:55:59 -0500
> > Ron <ron () skullsecurity net> wrote:
> >
> > I seem to have a different problem.  My scans work and I get responses
> > back with -f but a quick look with tcpdump shows my packets aren't
> > fragmented.  I'm running 2.6.31 mostly vanilla.
> >
> > If I add --send-eth I do see the fragments go by and the scan also
> > works.
> >
> > I suppose -f should probably imply --send-eth, at least on Linux.
>
> I'm not sure if Linux always does that.  Here is what the man page
> entry for -f says about the issue:

What would be the motivation not to imply --send-eth where possible on
Linux fragmentation scans?

-M
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/