Prev | Current Page 240 | Next

Mark D. Spivey

"Practical Hacking Techniques and Countermeasures"


-r Tells nmap NOT to randomize the order in which ports
are scanned.
690  Practical Hacking Techniques and Countermeasures
Chapter Tool Syntax
Chapter 3
(continued)
Ping --randomize_hosts Tells nmap to shuffle each group of
up to 2,048 hosts before it scans them. This can make
the scans less obvious to various network monitoring
systems, especially when you combine it with slow.
-M Sets the maximum number of sockets
that will be used in parallel for a TCP connect () scan
(the default). This is useful to slow down the scan a
little bit and avoid crashing remote machines. Another
approach is to use ??“sS, which is generally easier for
machines to handle. Generally nmap does a good job
at adjusting for network characteristics at runtime and
scanning as fast as possible while minimizing the
chances of hosts/ports going undetected. However,
there are same cases where nmap??™s default timing
policy may not meet your objectives. The following
options provide a fine level of control over the scan
timing.
-T
These are canned timing policies for conveniently
expressing your priorities to nmap. Paranoid mode
scans very slowly in the hopes of avoiding detection by
IDS systems. It serializes all scans (no parallel scanning)
and generally waits at least 5 minutes between sending
packets. Sneaky is similar, except it only waits 15
seconds between sending packets.


Pages:
228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252