Nmap Development mailing list archives

Re: new line added to latest nmap?


From: Daniel Miller <bonsaiviking () gmail com>
Date: Sun, 2 Jul 2017 15:38:32 -0500

This output line means that you used either --defeat-rst-ratelimit or
--open. Nmap 7.40 and later began using the --open option to imply
--defeat-rst-ratelimit, since the only difference in results with the
latter is a possible confusion between closed and filtered ports;
--open hides both of those, so there ought to be no confusion anyway,
unless you're looking at the "Not shown: 997 closed ports" line, which
may now show something more like "Not shown: 877 filtered ports, 120
closed ports." The message you mentioned is intended to prevent
possible misreading of that line.

Skipping the extra work and slowdown needed (for some systems) to
detect the difference between closed and filtered ports ought to
result in a speedup for users who elect the --open option.

Dan

On Sun, Jul 2, 2017 at 12:26 PM, Mike . <dmciscobgp () hotmail com> wrote:
can someone elaborate on this new output line that has been added?


Some closed ports may be reported as filtered due to --defeat-rst-ratelimit


is this something new now we see in the wild on hosts?


_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: