wtf *is* a stealth scan? (snort)

From: bad_knee (bl8n8r_at_yahoo.com)
Date: 03/09/04 

Date: 9 Mar 2004 10:24:06 -0800

Hello All,
Can someone elaborate on just how a "Stealth Scan" works, or
just what exactly is going on connection-wise? Does a stealth
scan actually connect to a port on a server, or is there just
some funky juju packet mangling going on?

Thanks,
bl8n8r

Relevant Pages

  • wtf *is* a stealth scan? (snort)
    ... Can someone elaborate on just how a "Stealth Scan" works, ... just what exactly is going on connection-wise? ... Does a stealth ... scan actually connect to a port on a server, ...
    (comp.os.linux.networking)
  • Re: AdAware, SpyBot S &D, etc. + leave PC connected to Internet
    ... > non-critical patches. ... just did stealth scan again nd the result is shown below. ... FTP DATA 20 BLOCKED This port has not responded to any of our probes. ...
    (comp.security.firewalls)
  • Re: Sleath ports with Sygate PF
    ... everything that does "stealth" your system has ... the router will still see ... Any port scanner will see it. ...
    (comp.security.firewalls)
  • Re: Linksys Router Security Alert!
    ... Complaining about port 113 being closed as opposed to stealth ... "mini-DDoS" attack on multiple servers be considered an actual DDoS ... IRC is not the only service that uses IDENT. ...
    (comp.security.firewalls)
  • Re: Firewall question 2
    ... U should never have 2 or more firewall installed AND running ... If a port is showing as closed, it can be scanned and eventually be broken ... Results from stealth scan at TCP/IP address: ... There is NO EVIDENCE WHATSOEVER that a port ...
    (comp.security.firewalls)