[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nmap-dev
Subject:    Ports scanning in reverse when using -r
From:       Richard van den Berg <richard.vandenberg () ins ! com>
Date:       2006-07-14 14:40:18
Message-ID: 44B7ACD2.1040306 () ins ! com
[Download RAW message or body]

I am running nmap 4.11 using the -r (scan ports consecutively) switch.
This makes nmap scan low port numbers first most of the time, but
sometimes I see the port numbers for the same target host counting
backwards. At first I used tcpdump to keep track of the exact progress,
but -d2 shows the same. With -sS -p- I watched (for the same target
host) the ports go from 11000 down to about 7000, then up from 1 to
7000. Very strange to see. At this moment I am watching a simple -sU
count down from 400 to 1. In both cases I am scanning a /24 with 135
active hosts.

Is this intended behavior?

Sincerely,

-- 
Richard van den Berg
Consultant, INS

E-mail: richard.vandenberg@ins.com
Mobile: +31 (0)6-52071109

PGP Key ID: 0x6614D2AC
Fingerprint: 6829 0AD3 2F49 6D83 B65E E235 B8D3 8299 6614 D2AC



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
[prev in list] [next in list] [prev in thread] [next in thread]