[H-GEN] nmap UDP scanning

[Hilton Travis]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

Hi Robert,

On Sat, 2002-12-21 at 14:18, Robert Brockway wrote:
> On 21 Dec 2002, Hilton Travis wrote:
> 
> > [root at sirlancelot /tmp]# nmap -sU -p 10000 -T insane 192.0.2.1
> >
> > Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
> > Interesting ports on (192.168.69.1):
> > Port       State       Service
> > 23/udp     open        unknown
> >
> > Nmap run completed -- 1 IP address (1 host up) scanned in 1 second
> 
> Hilton, why are you telling nmap to probe 192.0.2.1 [1] udp port 10000 and
> getting a response from 192.168.69.1 udp port 23? ;)  Port redirection?

I'm using it as I didn't want to give the real address of the machine I
was scanning.  :)  That's all.  It is, afterall, the designated
TEST-NET.

> For some reason I did not notice this earlier :)
> 
> [1] This is not an RFC1918 address btw :)  I've seen people erroniously
> belive that all of 192.0.0.0/8 is reserved address space before.  I'm sure
> that is not the case here :)

That's right.  192.0.2.0/24 is reserved, not the entire 192.0.0.0/8
network.  RFC 3330.

-- 

Regards,

Hilton Travis                   Email: Hilton at QuarkAV.com
Manager                         Phone: +61-(0)7-3343-3889
Quark AudioVisual               Phone: +61-(0)419-792-394
Quark Computers
(Brisbane, Australia)            http://www.QuarkAV.com/

Non Linear Video Editing Solutions & Digital Audio Workstations
 Network Administration, SmoothWall Firewalls, NOD32 AntiVirus
  Conference and Seminar AudioVisual Production and Recording


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/