Update -A documentation to note that OS detection and traceroute are only enabled if root access (or equiv) is available

This commit is contained in:
fyodor 2014-08-12 22:48:31 +00:00
parent b8d37a32da
commit f2d3c64245
2 changed files with 80 additions and 24 deletions

View file

@ -4189,22 +4189,24 @@ hosts with at least one
<indexterm significance="preferred"><primary><option>-A</option></primary></indexterm>
</term>
<listitem>
<para>This option enables additional advanced and
aggressive options. I haven't decided exactly which it
stands for yet. Presently this enables OS detection
(<option>-O</option>), version scanning (<option>-sV</option>),
script scanning (<option>-sC</option>) and
traceroute (<option>--traceroute</option>).<indexterm><primary><option>-A</option></primary><secondary>features enabled by</secondary></indexterm>
More features may be
added in the future. The point is to enable a
comprehensive set of scan options without people having
to remember a large set of flags. However, because script
scanning with the default set is considered intrusive, you
should not use <option>-A</option> against target networks
without permission. This option only enables features, and
not timing options (such as <option>-T4</option>) or verbosity
options (<option>-v</option>) that you might want as well.</para>
<para>This option enables additional advanced and aggressive
options. Presently this enables OS detection
(<option>-O</option>), version scanning
(<option>-sV</option>), script scanning
(<option>-sC</option>) and traceroute
(<option>--traceroute</option>).<indexterm><primary><option>-A</option></primary><secondary>features
enabled by</secondary></indexterm> More features may be
added in the future. The point is to enable a comprehensive
set of scan options without people having to remember a
large set of flags. However, because script scanning with
the default set is considered intrusive, you should not use
<option>-A</option> against target networks without
permission. This option only enables features, and not
timing options (such as <option>-T4</option>) or verbosity
options (<option>-v</option>) that you might want as
well. Options which require privileges (e.g. root access)
such as OS detection and traceroute will only be enabled
if those privileges are available.</para>
</listitem>
</varlistentry>