Re: PortBunny - FX and Fabs at 24C3 - UDP Results

["Robert E. Lee" <robert () outpost24 com>]

Let's not forget about UDP (all 65536 ports).

# time us -mU scanme.insecure.org/32:a -L0 -r75000 -E
UDP open                  domain[   53]         from 205.217.153.62  ttl
52 

real    0m2.151s
user    0m0.593s
sys     0m0.439s

=-=-=-=-=-=-=-=-=-=-=

# time nmap -sU -p0-65535 scanme.insecure.org

Starting Nmap 4.53 ( http://insecure.org ) at 2008-01-24 07:33 PST
All 65536 scanned ports on scanme.nmap.org (205.217.153.62) are open|
filtered

Nmap done: 1 IP address (1 host up) scanned in 1447.239 seconds

real    24m7.244s
user    0m0.060s
sys     0m0.040s

*** Note: Missed port 53 UDP

=-=-=-=-=-=-=-=-=-=-=

2.151 vs 1447.244 seconds, and a ding for missing a port.

I will be conducting quite a few more tests tonight, including portbunny
and scanrand tests.  I will post the results of these tomorrow here:
http://loquens-caesu.blogspot.com/

Cheers,

Robert

-- 
Robert E. Lee
Chief Security Officer
Outpost24 - One Step Ahead
http://www.outpost24.com
 
SE Phone: +46 455-61-2320
US Phone: +1 801-924-5902
email: robert () outpost24 com


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org