On Fri, Feb 14, 2003 at 11:53:11AM -0500, [EMAIL PROTECTED] wrote:
> First of all, thanks for the new SYN scanner - it is 3-4 times faster than
> an NMAP Syn scan. However it does appear quite innacurate. In multiple tests
> against a host running ssh, http, https the syn scanner only detected https
> - Even though a tcpdump during the portscan for packets with SA flags set
> showed responses from ssh and https (not http however):
Much tuning still needs to be done. I'll change the computation of the
RTT to improve the results.
-- Renaud