You are manually conducting Idle Scanning using Hping2.

Vendor: ECCouncil
Product: EC0-350
Update on: Jul 25, 2025
Questions: 878

ECCouncil EC0-350 Question Answer

You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries cause the IPID to increment by more than one value. Why do you think this occurs?

The zombie you are using is not truly idle.

A stateful inspection firewall is resetting your queries.

Hping2 cannot be used for idle scanning.

These ports are actually open on the target system.