PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-20 05:09:02 +00:00
Code Issues Projects Releases Wiki Activity

New option --defeat-icmp-ratelimit. Closes #353, Fixes #216

Browse Source
This commit is contained in:
dmiller
2016-12-09 04:19:45 +00:00
parent be64d14098
commit 3f1ad0742e
7 changed files with 63 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
docs/refguide.xml
View File

@@ -2940,6 +2940,25 @@ worth the extra time.</para>
</listitem>
</varlistentry>
<varlistentry>
<term><option>--defeat-icmp-ratelimit</option>
<indexterm><primary><option>--defeat-icmp-ratelimit</option></primary></indexterm></term>
<listitem>
<para>Similar to <option>--defeat-rst-ratelimit</option>, the
<option>--defeat-icmp-ratelimit</option> option trades accuracy for speed,
increasing UDP scanning speed against hosts that rate-limit ICMP error
messages. Because this option causes Nmap to not delay in order to receive
the port unreachable messages, a non-responsive port will be labeled
<literal>closed|filtered</literal> instead of the default
<literal>open|filtered</literal>. This has the effect of only treating ports
which actually respond via UDP as <literal>open</literal>. Since many UDP
services do not respond in this way, the chance for inaccuracy is greater
with this option than with <option>--defeat-rst-ratelimit</option>.</para>
</listitem>
</varlistentry>
<varlistentry>
<term><option>--nsock-engine
epoll|kqueue|poll|select</option>