three-way TCP

Jason Martin jhmartin at toger.us
Thu Oct 7 17:54:38 CEST 2004


On Thu, Oct 07, 2004 at 05:52:09PM +0200, S?bastien Cantos wrote:
> You can check if a service (tcp port) is responding just by completing 2
> parts of the 3 way handshake.
> 
> 1/ Client send a Syn to the server
> 2/ Server respond with a Syn/Ack
> 
> This is called *stealh* scanning.
I see; however check_http generally posts some data into the
webserver and listens for the response, which would naturally
require the full 3-way handshake. 

What benefit would there by in doing a 2-way vs a 3-way?

-Jason Martin

-- 
No one ever said "if I'd only spent more time in the office"
This message is PGP/MIME signed.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 211 bytes
Desc: not available
URL: <https://www.monitoring-lists.org/archive/users/attachments/20041007/463f4e78/attachment.sig>


More information about the Users mailing list