PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-20 05:09:02 +00:00
Code Issues Projects Releases Wiki Activity

New option --discovery-ignore-rst. Closes #1616

Browse Source
This commit is contained in:
dmiller
2020-08-31 15:20:49 +00:00
parent 05ad57df21
commit 3d382bdf17
7 changed files with 36 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
docs/refguide.xml
View File

@@ -871,6 +871,23 @@ content can also be affected with the <option>--data</option>,
</listitem>
</varlistentry>
<varlistentry>
<term>
<option>--discovery-ignore-rst</option>
<indexterm><primary><option>--discovery-ignore-rst</option></primary></indexterm>
</term>
<listitem>
<para>In some cases, firewalls may spoof TCP reset (RST) replies in
response to probes to unoccupied or disallowed addresses. Since
Nmap ordinarily considers RST replies to be proof that the target
is up, this can lead to wasted time scanning targets that aren't
there. Using the <option>--discovery-ignore-rst</option> will
prevent Nmap from considering these replies during host discovery.
You may need to select extra host discovery options to ensure you
don't miss targets in this case.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>