Movatterモバイル変換

[0]ホーム
URL:

Home page logo
nmap-dev logo

Nmap Developmentmailing list archives

PreviousBy DateNext
PreviousBy ThreadNext

Re: Nmap says Host down when actually host is up.

From: Fyodor <fyodor () insecure org>
Date: Fri, 26 Oct 2007 00:50:06 -0700
On Fri, Oct 26, 2007 at 07:10:33AM +0000, Brandon Enright wrote:
I haven't given it more than 2 seconds of thought, but we could trysomething TCP SYNCOOKIE inspired for our ICMP ECHO requests.
Hi Brandon.  The response already has enough information (e.g. ICMPsequence and ID numbers) for us to recognize it.  But I think in mostcases where we get a response from a different IP than the target wesent to, it is because the target host forwarded the request(e.g. subnet-directed broadcast) to other machines, and one or more ofthem answered.  In that case, for us to mark the target as up would bea false postive.  For us to change that behavior and mark the host asup, I would want some evidence that actual online hosts respondingwith the wrong IP is a normal occurence.Cheers,-F_______________________________________________Sent through the nmap-dev mailing listhttp://cgi.insecure.org/mailman/listinfo/nmap-devArchived athttp://SecLists.Org
PreviousBy DateNext
PreviousBy ThreadNext

Current thread:

[8]ページ先頭
©2009-2025 Movatter.jp