Karen was running Nmap port scans on each machine of her network to identify suspicious ports on the target machines. She observed that there are some ports that neither sent RST packet or ACK packet in response to the packet sent by Nmap. What should she interpret for the ports that did not return the acknowledgment?
Karen was running Nmap port
scans on each machine of her network to identify suspicious ports on
the target machines. She observed that there are some ports that
neither sent RST packet or ACK packet in response to the packet sent
by Nmap. What should she interpret for the ports that did not return
the acknowledgment?
A. She should treat those
ports as Half Open ports
B.
She should treat those ports as Open ports
C. She should treat those
ports as Closed ports
D. She should treat those
ports as filtered ports
The nmap documentation states the following for `NULL, FIN and Xmas scans:
ReplyDeleteWhen scanning systems compliant with this RFC text, any packet not containing SYN, RST, or ACK bits will result in a returned RST if the port is closed and no response at all if the port is open. As long as none of those three bits are included, any combination of the other three (FIN, PSH, and URG) are OK.