4.01 is Now Available
Posted Feb 16, 2006 7:29 UTC (Thu) by Ross
In reply to: 4.01 is Now Available
Parent article: A look at nmap 4.0
This probably isn't the best forum to ask, but I've always wondered why nmap doesn't look at ICMP formatting for use in OS detection. Reportedly the way the original packets are quoted varies widely. Of course sometimes ICMP is blocked, but when it is not this might help disambiguate certain cases (or cases where people are using firewall rules to frustrate fingerprinting based on TCP option handling).
to post comments)