Re: Nmap issues...? or router?

From: Blake Frantz (blakeat_private)
Date: Sun Oct 07 2001 - 18:26:14 PDT

  • Next message: Tony Harris: "RE: Clearing IIS logs"

    This can happen if the net you are scanning from has more bandwidth than
    the medium connecting you to the target machine (when no traffic shaping
    mechanism is inplace).
    
    Concider the following:
    
    
    +---------+
    | Scanner |
    +----+----+
         |
         |  1000 mbit
         |
    +----+----+     
    | Switch  |
    +----+----+
         |
         |
         |
    +----+----+
    | Router  |
    +----+----+
         |
         |  DS-3
         |
    +----+----+
    | Switch  |
    +----+----+
         |
         |
         |
    +----+----+  
    | Target  |  
    +---------+
    
    
    -Blake
    
    On 7 Oct 2001, bluefur0r bluefur0r wrote:
    
    > After just completeing an audit for a company that has a DS-3 connection (shared) and a cisco router (2015), One of the first issues that was found was this: When nmaping using -sS and all ports, 1 nmap scan nmaping 1 host at a time appeared to completely destroy their bandwidth... Has anyone heard of this? Could this be a Router or ISP problem??? It took very long to complete because i needed to use the -T Polite option. I'm just curious if anyone else has ever encountered nmap using up all network resources for such a high volume connection. Any help would be appreciated so this never happens again. *Luckily I started after hours*
    > blue
    > 
    > =================================================================
    > Kies een origineel e-mailadres op www.emails.nl
    > 
    > ----------------------------------------------------------------------------
    > This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    > Service. For more information on SecurityFocus' SIA service which
    > automatically alerts you to the latest security vulnerabilities please see:
    > https://alerts.securityfocus.com/
    > 
    > 
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Tue Oct 09 2001 - 11:14:56 PDT