FAQ for wups.exe
143a433eaa0d4f0ac8a8d493ad044694<HTML>
<HEAD>
<TITLE>The WUPS FAQ</TITLE>
</HEAD>
<BODY BGCOLOR="BLACK" TEXT="#FFDFBF" LINK="#C08010" VLINK="#C08010" ALINK="WHITE">
<FONT FACE="arial" SIZE="3">
<B>- The WUPS FAQ -</B>
</FONT>
<FONT FACE="arial" SIZE="2">
<BR><BR>
<I><FONT COLOR="#C08010">Q: </FONT>How does the Delay affect the result of a scan?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>The Delay is very important for a couple of reasons. First, each port you scan will cause over 85 bytes to be transfered over the network (the exact amount depends on the kind of network). Say that your connection can only handle 5kb per second. If you scan with a delay of 10 ms, that will generate over 8.5 kb per second, and the scan will choke. This is nothing new, the same happens with TCP port scanners. The second thing is that this UDP port scanner relies on that the scanned system sends back ICMP packets. A lot of machines limit the number of ICMP packets that may be sent in a specific time interval. The limit depends on the kind of system, sometimes a Delay of 50 ms will do, sometimes 500 ms will do, and sometimes you have to scan with a Delay of over 1000 ms. If you reach the systems limit, it will choke and you have to restart the scan. Some systems choke so bad that you can't scan them again for an hour or so. However, if you scan a Windows machine you can usually set the Delay as low as the network connection allows.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>Which kind of packet filters will make a scan fail?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>A packet filter that drops UDP packets from the scanner to the scanned system, and also a filter that drops ICMP packets going from the scanned system to the scanner.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>The result of a scan is only displayed after the scan is completed, how does this affect the scan?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>This shouldn't be too much of a problem when the Delay has been properly set, but to set the Delay to an optimal value isn't that easy. Also there could be a problem if a packet filter stops the scan. Try to divide the range you wish to scan into several smaller, and scan them separately to minimize the effect of a possible error.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>What does the message "Insufficient privileges" mean?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>It means that you are running WUPS on Windows NT but you aren't a member of the Administrators group, which is required.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>I have a question that is not covered by this FAQ. Where can I get help?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>Send a mail to winnt@bahnhof.se with your question. I can't promise that I will have time to answer, but I'll do my best.
</BLOCKQUOTE>
</FONT>
<FONT FACE="arial" SIZE="2">
<BR><BR>
<HR WIDTH="50%" ALIGN="CENTER" SIZE="1">
<CENTER><A HREF="http://www.bahnhof.se/~winnt/">[Home]</A> <A HREF="http://www.bahnhof.se/~winnt/advisories/index.html">[Security Advisories]</A> <A HREF="http://www.bahnhof.se/~winnt/toolbox/index.html">[The Toolbox]</A> <A HREF="http://www.bahnhof.se/~winnt/trashcan/index.html">[The Trashcan]</A></CENTER>
<P ALIGN=RIGHT>
<FONT FACE="arial" SIZE="1">
© 1999, Arne Vidström
</FONT>
</P></FONT>
</BODY>
</HTML>
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!