Hello,

I've noticed recently, on a network I'm responsible for keeping an eye on, that the 
machines no longer answer to icmp ping.  The IT guys have been busy.  ;)

I verified that though these machines now drop icmp ping, all the services are still 
there, e.g. web applications are still available by navigating to tcp port 80.

I'm curious about the tcp ack and tcp syn pings and the relationship between Nmap and 
Nessus.  The Nmap frontend defaults to tcp ack ping (along with imcp ping) and when I 
scan this particular network with those options, nothing is found.  Nessus however, 
*does* find the machines.  I was confused by this, so I tried the tcp syn ping in the 
Nmap frontend, and had success where the tcp ack ping failed.

Is Nessus using a tcp syn ping during discovery?  Is it typical that a tcp ack ping 
would not be as successful as a tcp syn ping?

Thanks for the advice!

Mark
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to