Re: new line added to latest nmap?

Daniel Miller <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CABmvJnNy7wCLuCh3vOxzeMAReU04KeL2bB6urjDSxRHrMLDgrw@mail.gmail.com>
This output line means that you used either --defeat-rst-ratelimit or
--open. Nmap 7.40 and later began using the --open option to imply
--defeat-rst-ratelimit, since the only difference in results with the
latter is a possible confusion between closed and filtered ports;
--open hides both of those, so there ought to be no confusion anyway,
unless you're looking at the "Not shown: 997 closed ports" line, which
may now show something more like "Not shown: 877 filtered ports, 120
closed ports." The message you mentioned is intended to prevent
possible misreading of that line.

Skipping the extra work and slowdown needed (for some systems) to
detect the difference between closed and filtered ports ought to
result in a speedup for users who elect the --open option.

Dan

On Sun, Jul 2, 2017 at 12:26 PM, Mike . <[email protected]> wrote:
> can someone elaborate on this new output line that has been added?
>
>
> Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
>
>
> is this something new now we see in the wild on hosts?
>
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.