UDP pings

[Andy Lutomirski <luto () stanford edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I noticed today that some Linksys boxes can be set to "filter"
incoming TCP and UDP, but apparently will always (except for
rate-limiting) return port unreachable for UDP.  While this can be
easily used to detect them in current build (nmap -sU -p33333 -P0
<box>), it would be nice to have it as a ping mode (nmap -sP
- -P<whatever> -PU33333 <range>).

This also suggests another feature idea: report which ping(s) a host
responded to.  For example:

$ nmap -v -sP -PI -PT80 -PU33333 <range>

...
Host foo (1.2.3.4) appears to be up (I, !T80).   -- indicates that I
worked, T80 failed, others not tried.
Host bar (1.2.3.5) appears to be up (!I, U33333).
...

Or, on a fancier note:

$ nmap -v --ping_all_types -sP -PI -PT80 -PT113 -PU33333 <range>

-- same but tries all types, even if this means multiple successes

$ nmap -v --ping_all_types -sS -p80,139 -PI -PT113 -PU33333 <range>
...
Host foo (1.2.3.4) appears to be up (T113, !I, U33333).
<port list here>
...


(I leave the utility of these commands as an exercise to the reader
- -- either one would give some interesting information on a network I
know of.  Another peculiarity of said network would then allow me to
..., but that's another story :)

Andy

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
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=rH3d
-----END PGP SIGNATURE-----



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).