Editing Port scanner (section)

===Other scan types===
Some more unusual scan types exist. These have various limitations and are not widely used. [[Nmap]] supports most of these.<ref name=nmapguide/>
* [[Xmas Port Scan|X-mas]] and Null Scan - are similar to [[#FIN scanning|FIN scanning]], but:<ref name=ERIK77/>
** X-mas sends packets with FIN, URG and PUSH flags turned on like a Christmas tree
** Null sends a packet with no TCP flags set
*[[Protocol scan]] - determines what IP level protocols (TCP, UDP, [[Generic Routing Encapsulation|GRE]], etc.) are enabled.
*[[Proxy server|Proxy]] scan - a proxy ([[SOCKS]] or [[HTTP]]) is used to perform the scan. The target will see the proxy's IP address as the source. This can also be done using some [[File Transfer Protocol|FTP]] servers.
*[[Idle scan]] - Another method of scanning without revealing one's IP address, taking advantage of the [[predictable IP ID]] flaw.
*CatSCAN - Checks ports for erroneous packets.
*[[Internet Control Message Protocol|ICMP]] scan - determines if a host responds to ICMP requests, such as echo ([[Ping (networking utility)|ping]]), netmask, etc.