jah a17609e6b4 Ports are now considered open during a SYN scan if a SYN packet (without the ACK ...

flag) is received in response. This can be due to an extremely rare TCP feature
known as a simultaneous open or split handshake connection.
see http://nmap.org/misc/split-handshake.pdf
Added a reason code: ER_SYN and associated reason string: "split-handshake-syn".

2010-06-08 01:50:45 +00:00

9.2 KiB

Raw Blame History

View Raw