From: Peter Kosinar (gooberksp.sk)
Date: Fri Feb 16 2007 - 20:13:07 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello Baris,

> When i use "nmap -sS targetaddress -S spoofaddress -e eth0" command,
> nmap does not show open ports at end of scan.

In many cases, this can be attributed to fact that in order to be able to
distinguish a closed port from an open one, NMAP actually needs to see the
replies from the scanned machine... and when you use the -S with a random
address, the replies will be sent to that random address (if anywhere at
all).

The other cases include the packets being dropped by some device on their
way to / from the scanned machine (e.g. most firewalls have no reason to
let packets coming from the internal network but claiming an outside IP
through).

Peter

--
[Name] Peter Kosinar [Quote] 2B | ~2B = exp(i*PI) [ICQ] 134813278

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]