Prev | Current Page 241 | Next

Mark D. Spivey

"Practical Hacking Techniques and Countermeasures"

Polite is meant to
ease the load on the network and reduce the chances
of crashing machines. It serializes the probes and waits
at least 0.4 seconds between them. Normal is the
default nmap behavior, which tries to run as quickly as
possible without overloading the network or missing
hosts/ports. Aggressive mode adds a 5-minute timeout
per host and it never waits more than 1.25 seconds for
probe responses. Insane is only suitable for very fast
networks or where you do not mind losing some
information. It times out hosts in 75 seconds and only
waits 0.3 seconds for individual probes. It does allow
for very quick network sweeps, though. You can also
reference these by number (0??“5). For example, -T 0
gives you Paranoid mode and -T 5 is Insane mode.
These canned timing modes should NOT be used in
combination with the lower-level controls given next.
--host_timeout Specifies the amount of
time nmap is allowed to spend scanning a single host
before giving up on that IP. The default timing mode
has no host timeout.
Appendix B : Tool Syntax  691
Chapter Tool Syntax
Chapter 3
(continued)
Ping --max_rtt_timeout Specifies the maximum
amount of time nmap is allowed to wait for a probe
response before retransmitting or timing out that
particular probe. The default mode sets this to about
9000.
--min_rtt_timeout When the target hosts
start to establish a pattern of responding very quickly,
nmap will shrink the amount of time given per probe.


Pages:
229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253