david 439e991985 When handling ICMP ping probe replies, make sure we match up with the ...

right type of probe (0 with 8, 14 with 13, 18 with 17). With the new
default ping, I was scanning a network where an echo reply would
mistakenly be interpreted as a response to a timestamp request, even
though that host didn't respond to timestamp requests. That host would
become the global ping host, and all its probes would be dropped,
slowing the scan way down. A ping scan of a /24 took over 1,000 seconds
when it should have taken about 10.

2009-05-27 22:08:24 +00:00

198 KiB

Raw Blame History

View Raw