Module idle 

idle submodule. TCP idle scan (-sI zombie[:probeport]): spoofed SYN from the zombie’s IPv4 toward targets, IP-ID sampling on the zombie (closed-port RST probes). IPv4 only; sequential probes so IP-ID deltas stay meaningful for one zombie.

Functions

idle_scan_ipv4

Idle scan: IPv4 targets only; sequential per (target, port).