Re: new line added to latest nmap?
Daniel Miller <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CABmvJnNy7wCLuCh3vOxzeMAReU04KeL2bB6urjDSxRHrMLDgrw@mail.gmail.com> |
This output line means that you used either --defeat-rst-ratelimit or --open. Nmap 7.40 and later began using the --open option to imply --defeat-rst-ratelimit, since the only difference in results with the latter is a possible confusion between closed and filtered ports; --open hides both of those, so there ought to be no confusion anyway, unless you're looking at the "Not shown: 997 closed ports" line, which may now show something more like "Not shown: 877 filtered ports, 120 closed ports." The message you mentioned is intended to prevent possible misreading of that line. Skipping the extra work and slowdown needed (for some systems) to detect the difference between closed and filtered ports ought to result in a speedup for users who elect the --open option. Dan On Sun, Jul 2, 2017 at 12:26 PM, Mike . <[email protected]> wrote: > can someone elaborate on this new output line that has been added? > > > Some closed ports may be reported as filtered due to --defeat-rst-ratelimit > > > is this something new now we see in the wild on hosts? > > > _______________________________________________ > Sent through the dev mailing list > https://nmap.org/mailman/listinfo/dev > Archived at http://seclists.org/nmap-dev/ _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/