thread in a scanner

slipparse · Post by **slipparse** » 02 Dec 2005, 11:35

Some scanners and more particulary vulnerability scanners have something like a "threads option".

f.e. MS05039Scan.exe 192.168.1.0 192.168.1.255 100

I have been told this thread option says sth about the speed and accuracy of your scan. Is that true?

And which thread value is the most approriate if you want to make a quick scan which is reliable enough?

Post by **bad_brain** » 02 Dec 2005, 12:09

hm, I guess it means how long the scanner connects to do his probe on the port. if the time is too short the scanner is already at the next IP when the host answers and so the probe fails.
the longer the time the more reliable the result, I would say 1 second is enough (should be 1000 then if the time is displayed in milliseconds)....

slipparse · Post by **slipparse** » 02 Dec 2005, 13:21

right that explains why I have so few scan results

I have always thought that a smaller thread value leads to a more accurate scan. That's why I have been scanning on max 50-100. Apparently it's just the opposite like I thought it was. Will try scanning with a higher value

Thanks for the handy tip