What does the CoX flag do in an Nmap scan?