1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-18 21:49:01 +00:00

Add to CHANGELOG:

o Removed IP ID matching in packet headers returned in ICMP errors.
  This was already the case for some operating systems that are known
  the IDs of sent IP packets. In rare cases of ID mangling, requiring
  a match could cause replies to be ignored even after other tests had
  shown them to be relevant. See http://seclists.org/nmap-dev/2009/q2/580
  for an example of host order affecting scan results, caused by this
  phonomenon. [David]

o Added some additional matching rules to keep a reply to a SYN probe
  from matching an ACK probe to the same port, or vice versa, in ping
  scans that include both scan types. Such a mismatch could cause an
  ineffective timing ping or traceroute probe to be selected. [David]
This commit is contained in:
david
2009-11-05 02:25:12 +00:00
parent b0976983bc
commit 1fa16fa8c6

View File

@@ -1,5 +1,18 @@
# Nmap Changelog ($Id$); -*-text-*-
o Removed IP ID matching in packet headers returned in ICMP errors.
This was already the case for some operating systems that are known
the IDs of sent IP packets. In rare cases of ID mangling, requiring
a match could cause replies to be ignored even after other tests had
shown them to be relevant. See http://seclists.org/nmap-dev/2009/q2/580
for an example of host order affecting scan results, caused by this
phonomenon. [David]
o Added some additional matching rules to keep a reply to a SYN probe
from matching an ACK probe to the same port, or vice versa, in ping
scans that include both scan types. Such a mismatch could cause an
ineffective timing ping or traceroute probe to be selected. [David]
o [Zenmap] There is a new command-line option, --confdir, which allows
setting the per-user configuration directory. Its value defaults to
$HOME/.zenmap. This was suggested by Jesse McCoppin. [David]