Re: scan

[danilo lujambio <danilo@tau.org.ar>]

El jue, 10 de 04 de 2003 a las 21:10, Marcin Owsiany escribió:
> On Thu, Apr 10, 2003 at 02:33:59PM -0300, danilo lujambio wrote:
> > When I scanned with nmap this server , it shuted down and rebooted.
> 
> Did it go through runlevel 6, or just simply crashed? If it was the
> latter, then it's probably broken hardware (it didn't reboot when
> scanning localhost, because lo is a software-only interface).
> 
> Try pingflooding it (ping -f) and see if it crashes.
> 

well , first thanks to all who answer ! .

I probed ping -f to the server and it didn't crash (sorry it never
reboot, always crashes under scan)

We make this type of scan regularly  to our servers, and this is the
first time that we find this situation. The diference with other servers
is that they run woody but with kernel 2.2.x.

We thought that was a hardware problem which causes the problem, we
change the NIC but we have obtained the same results. 

I started tcpdump in a machine that run nmap to capture the packets when
I make the scan but sinceresly I have not been able to find or to read
good information.

Thanks again  

> Marcin
> -- 
> Marcin Owsiany <porridge@debian.org>             http://marcin.owsiany.pl/
> GnuPG: 1024D/60F41216  FE67 DA2D 0ACA FC5E 3F75  D6F6 3A0D 8AA0 60F4 1216
-- 
danilo lujambio <danilo@tau.org.ar>