NMAP did the trick. Thanks to ALL for your input.

It turns out that the Eeye port of NMAP also did an ACK scan with the -sA
option, it just wasn't mentioned in the "-h" help list. This was an
oversight on my part, because the help page did actually say that there are
many more options available, to see the MAN page. I should have been more
thorough before giving up.

The results are as one of the previous posters said, all RSTs regardless of
available services, and so far no useful info was obtainable. My IDS rule
is now complete, tested, and working. THANKS AGAIN everyone.

-Mark Coleman

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]