nmap decoy and response packet

I am trying to understand how the decoy option work under nmap,

isn't that true that if you are port scanning someone with decoy
option in nmap, the return packet log on victim system can tell whos
receiving the information and thus hacker can be tracked down.

what the hell is the decoy option good for then.

> I am trying to understand how the decoy option work under nmap,
>
> isn't that true that if you are port scanning someone with decoy
> option in nmap, the return packet log on victim system can tell whos
> receiving the information and thus hacker can be tracked down.
>
> what the hell is the decoy option good for then.

Slows down the investigation.

And makes the original attack look much more serious.

--
Jem Berkes
http://www.pc-tools.net/
Windows, Linux & UNIX software

> what the hell is the decoy option good for then.

Testing. Nmap is a tool for network administrators, remember?