diff --git a/docs/refguide.xml b/docs/refguide.xml index 7781629a8..26d0a73a7 100644 --- a/docs/refguide.xml +++ b/docs/refguide.xml @@ -1245,7 +1245,8 @@ ports, then those three may very well be the truly open ones. The Maimon scan is named after its discoverer, Uriel Maimon. He -described the technique in Phrack Magazine issue #49 (November 1996). +described the technique in Phrack Magazine issue #49 (November 1996). +Phrack Nmap, which included this technique, was released two issues later. This technique is exactly the same as null, FIN, and Xmas scans, except that the probe is FIN/ACK. According to RFC 793 (TCP), a RST packet