This statement is false. A SYN scan, which is also referred to as a 'stealth scan', is specifically designed to avoid completing the TCP three-way handshake that a full connect scan would. The stealth scan sends a SYN packet and, upon receiving a SYN-ACK indicating an open port, responds with an RST instead of an ACK. This prevents the connection from being fully established, which can help bypass some intrusion detection systems and reduce the likelihood of the scan being logged, as no full connection is made.
Learn More
AI Generated Content may display inaccurate information, always double-check anything important.
What is a SYN scan and how does it work?
What is the TCP three-way handshake?
What are intrusion detection systems (IDS) and how do they relate to scans?