Re: Crashing services with NMAP and/or SuperScan ?

From: Peter Wood (peterw@firstbase.co.uk)
Date: Tue Nov 23 2004 - 17:15:08 EST


At 11:41 23/11/2004 +0100, Petr.Kazil@eap.nl wrote:
>With Superscan I seem to have blown out a switch. It went "red" on the HP
>Openview screen and didn't react to ping anymore. All the network traffic
>continued - fortunately :-) As of today the admins haven't been able to
>tell me what really happened. I haven't dared to try Superscan anymore -
>although I like it's output very much - especially it's checks for headers
>and anonymous FTP and SMTP.

I have a client who did the same thing - with an Extreme switch. I imagine
it's a problem similar to the AIX problem, where the device allocates
memory to each attempted port until it runs out of memory and crashes? We
also have an ADSL router that behaves this way. The solution seems to be to
ensure that the scanner tears down the session properly rather than
executing a stealth scan IMHO.

regards
Pete



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:08 EDT