3 ms·
I might have missed it while reading the README, but can someone ELI5 why do we need to randomize our scans? Can't we just go scan one-after-another IP address
by gear54rus 12y ago
I might have missed it while reading the README, but can someone ELI5 why do we need to randomize our scans?
Can't we just go scan one-after-another IP address? Is this because such scan can easily be detected by ISP?
- anti-thought 12y agoThink of the internet like a tree, where the root is you and all other IPs are the leaves at the end. IPs close together tend to share more path of the tree as you attempt to reach them from the root. If you are sending an overwhelming amount of packets in one direction for too long, you have a higher chance of harming nodes (i.e. routers) along that path. Randomizing your end goal on the tree, by definition, equally spreads the packet spray accross the tree. This is how they can claim: "... it'll only melt your own network. It randomizes the target IP addresses so that it shouldn't overwhelm any distant network." Note "shouldn't", this was probably added due, in part, through use-case. If I were not scanning the whole Internet, and instead just scan a small section. Masscan has less of a space to randomize through, which means the tree is smaller and the shared paths are more frequent.