Questions tagged [nmap]

a free and open-source port scanner, operating system fingerprinter, and service fingerprinter

Filter by
Sorted by
Tagged with
1
vote
3answers
6k views

Nmap check if port is open in bash

I want to make a script which will check if a port is open on a server. If not open stay in a while. If open continue. The break conditions is use are if "host is up" is present and not "closed". I ...
2
votes
1answer
1k views

nmap won't recognize a hostname on my local area network

Scanning the machine on the LAN with my laptop, I got this: gabriele @ osiris { ~ } [ Tue Oct 07 ] [ 08:49 PM] nmap -sP 192.168.1.236 Starting Nmap 6.40 ( http://nmap.org ) at 2014-10-07 20:50 CEST ...
1
vote
1answer
72 views

What is scanning udp ports 8610-8612 on Debian Buster?

I've got several computers with Debian Buster (Gnome) installed. Thanks to psad tool I realized that all of them frequently (at least several times a day) scan udp ports 8610-8612 in the local network....
1
vote
1answer
67 views

How to run nmap from inside a chroot?

While I am trying to run nmap with privilege this message is showing: nmap: netutil.cc:3285: int route_dst_netlink(const sockaddr_storage*, route_nfo*, const char*, const sockaddr_storage*): ...
18
votes
2answers
33k views

Output only the IP addresses of the online machines with nmap

I know how to use nmap to find the list of hosts that are currently online. What I would like to do is get a list of just their IP addresses, now it displays extra information such as Nmap scan ...
0
votes
1answer
56 views

Find IP address of poe devices attached to my computer via ethernet

I'm currently trying to setup zoneminder on my computer that has Ubuntu as a host OS. Before I do all that, I want to know if the poe CCTV camera I purchased works, a Reolink RLC410-5MP There are ...
0
votes
1answer
34 views

Understanding the Netcat properly [closed]

Netcat confuses me a little bit and here are the reasons: when I run: nmap localhost There are some ports listed with the information whether they are open or closed. So if I run the command : nc -l -...
7
votes
1answer
825 views

MTU (IPv4) tests in Linux

I noticed I have several networks with all ICMP messages blocked at the firewall level, except for ICMP echo and reply. I know that there is a need at least ICMP messages type 3 in IPv4 have to be ...
1
vote
2answers
716 views

nmap socket trouble

I've been trying to use nmap but it fails with the following output: Starting Nmap 6.47 ( http://nmap.org ) at 2016-06-21 22:24 PDT NSOCK ERROR [0.3460s] nsock_make_socket(): Socket trouble: Address ...
-1
votes
1answer
30 views

How can fragment packets -f/--mtu be usefull?

How can fragment packets -f/--mtu be usefull ? That is, say from a normal scan I get for a given IP and port range: 28/tcp filtered unknown no-response 29/tcp filtered msg-icp no-response 30/tcp ...
1
vote
1answer
3k views

How to proxy nmap and dns resolution of nmap

How to use nmap and dns resolution of nmap over proxy? I tried proxychains, but for dns resolution it doesn't work, it's known bug as I read on some forums. It works well without dns_proxy feature in ...
1
vote
2answers
2k views

Nmap script execution to detect heartbleed is failing

Wanting to setup Nmap on my Ubuntu 14.04 LTS system to detect HeartBleed vulnerability. I followed the instructions here: http://cyberarms.wordpress.com/2014/04/20/detecting-openssl-heartbleed-with-...
4
votes
1answer
7k views

Run nmap via Tor

Is it possible to runnmap via Tor? When I googled around, I got the impression that Tor uses Polipo / Privoxy, which are socks5 proxies. So any TCP / UDP aware applications should be able to use them ...
0
votes
1answer
29 views

List all accessible ports from private network

I am connected to internet via the wifi provided by an Airport. I can't connect via SSH to my server. So, Airport may block port 22. Is there a way to use nmap to list all ports I can access through ...
0
votes
1answer
327 views

strange error “(22 - 'Invalid argument')” when used with IPv4

I have "(22 - 'Invalid argument')" using nmap. I've googled and got https://seclists.org/nmap-dev/, but that is discussing IPv6 while I've got this error using IPv4. It makes no mention of IPv4, so ...
1
vote
2answers
7k views

How to “open” on a “filtered” port

I am running: $ ssh user@ip_address and waiting for long time without response. I try to verify the status of my port: $ a=`nmap ip_address -PN -p ssh | grep filtered` $ echo $a 22/tcp ...
0
votes
1answer
25 views

What's the NSE of nmap?

When I use nmap for scanning IP, there prints logs: Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-05 10:27 ?D1ú±ê×?ê±?? NSE: Loaded 148 scripts for scanning. NSE: Script Pre-scanning. ...
3
votes
2answers
23k views

ICMP : Port unreachable error even if port is open

I am testing my Debian Server with some Nmap port Scanning. My Debian is a Virtual Machine running on a bridged connection. Classic port scanning using TCP SYN request works fine and detects port 80 ...
0
votes
1answer
84 views

Does `nmap -p0-65535 0.0.0.0` scan all the IP addresses on the local host?

Does nmap -p0-65535 0.0.0.0 scan all the tcp ports on any of the IP addresses on the local host, so report services listening at the tcp ports at any of the local IP addresses including 192.168.1.97 ...
2
votes
1answer
50 views

How to scan my computer's UDP ports

I have tried running nmap 192.168.0.97 to port-scan my computer, and I noticed it only lists TCP ports. For both TCP and UDP ports, I would start by asking the OS on my computer. I.e. How do I list ...
7
votes
4answers
917 views

why `nmap 192.168.1.97` returns less services than `nmap 127.0.0.1`? [duplicate]

According to https://networkengineering.stackexchange.com/a/57909/, a packet sent to 192.168.1.97 "doesn't leave the host but is treated like a packet received from the network, addressed to 192.168.1....
6
votes
3answers
918 views

Difference between `nmap local-IP-address` and `nmap localhost`

The following IP address is for my network interface $ nmap 192.168.0.142 Starting Nmap 7.60 ( https://nmap.org ) at 2019-03-09 11:33 EST Nmap scan report for ocean (192.168.0.142) Host is up (0....
2
votes
3answers
263 views

How to SSH into Raspberry Pi connected via Ethernet on CentOS7?

I am trying to SSH into my Raspberry Pi 3 Model B V1.2 from my laptop running CentOS7. I have connected them together via Ethernet cable but the laptop is unable to identify Raspi. So i tried running ...
1
vote
1answer
52 views

What are those “unknown” services listed by nmap?

I run nmap on a Lubuntu machine using its own private IP address. What are those "unknown" services? How can I find them out? Is fuser supposed to find that out? Thanks. $ nmap -p0-65535 192.168....
0
votes
1answer
62 views

nmap output in CSV format sorted by IP address

I have this command which works well to give me a list of IP addresses, MAC addresses, and MAC vendor, sorted by IP address. sudo nmap -sn 192.168.103.0/24 | awk '/Nmap scan report for/{printf $5;}/...
2
votes
1answer
58 views

How can I find out information about a service?

$ nmap -p0-65535 192.168.0.142 Starting Nmap 7.60 ( https://nmap.org ) at 2019-03-10 17:53 EDT Nmap scan report for ocean (192.168.0.142) Host is up (0.000031s latency). Not shown: 65531 closed ports ...
0
votes
2answers
51 views

How to specify nmap to add redirect address?

I'm trying to ping the health of VM's using nmap utility. # nmap -v -n -sP 192.168.102.116 Host 192.168.102.116 appears to be down. Note: Host seems down. If it is really up, but blocking our ping ...
0
votes
4answers
108 views

grep IPs and port number into one line

Using grep and cut I have returned the IP and ports of the nmap scan result which looks like this: 192.168.1.221 80 443 192.168.1.223 25 Desired output: 192.168.1.221:80 192.168.1.221:443 192.168....
0
votes
0answers
35 views

filtering nmap script scan and outputting ip:port format

I'm grepping for anything that contains ssl-cert, this is so I can get the IP and ports for any certificates in use. Also I'm grepping 11 lines above the "ssl-cert" which gives me this output( the ...
0
votes
0answers
45 views

Issues with IPv6 and Apache2

So I'm trying to set up an Ubuntu server with the web application running on IPv6 using an Internal adapter. I honestly do not know what the issue is. I've tried changing the adapter that is hosting ...
0
votes
1answer
39 views

Exhaustive list of REASONs why a host/server might be down (nmap --reason)

I'd like to have reference on how to get exhaustive REASONs why a host/server might be down in "PORT STATE SERVICE REASON VERSION" (below) of nmap using the --reason option. --------------------------...
0
votes
1answer
366 views

Ports not really open after firewalld command

OS: CentOS 7 This is a question that is bordering on two issues. I have a docker machine running where I recently installed the PLEX container from linuxserver/plex. The current problem is that I ...
-2
votes
2answers
79 views

How make a port appear open with an nmap scan

To avoid someone knowing which port are open on my machine, I thought it would useful to open all unused port so that the nmaper is unable to identify which port are really open. How make a port ...
0
votes
1answer
60 views

Scan network with Linux kernel command

Does Linux kernel provide some utility familiar to nmap for simple network scanning to discover attached nodes?
4
votes
3answers
10k views

What's the most effective way to detect nmap scans?

I am interested in detecting any nmap scans directed on a (my) GNU/Linux host. I would like to use snort in combination with barnyard2 and snorby for this, or if possible to perform a signature-based ...
17
votes
3answers
45k views

Can nmap display only hosts with specific ports open?

Can nmap list all hosts on the local network that have both SSH and HTTP open? To do so, I can run something like: nmap 192.168.1.1-254 -p22,80 --open However, this lists hosts that have ANY of the ...
1
vote
3answers
755 views

bash multi-threads

I have a list of IPs and I need to check them for opened ports using nmap. So far, my script is like this: #!/bin/bash filename="$1" port="$2" echo "STARTING NMAP" while IFS= read -r line do nmap -...
1
vote
1answer
6k views

mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled

I'm using UBUNTU 14.04 as virtual machine on Windows using VMWARE , after logging I installed nmap but after trying to run nmap -sP 10.42.0.0 I get the following message mass_dns: warning: Unable ...
4
votes
3answers
656 views

Understanding suspicious SSH commands

I have a dedicated hosting server that has few websites running. I recently accessed my server thru terminal cmd line and noticed that the last few commands that were executed look suspicious and I'm ...
0
votes
3answers
34 views

count matching open ports in a network log file

I have network log file like this one: Nmap scan report for 192.168.1.51 Host is up. PORT STATE SERVICE 80/tcp open http 443/tcp open https 8080/tcp open http-proxy 443/tcp ...
1
vote
1answer
58 views

Get web page from a list of ip addresses in a file

I have a list of ip addresses in a file, we can call that file ip.txt I scanned a subnet using zmap at port 80. So I have about 100 addresses returned into that file. Instead of popping each ip into ...
0
votes
1answer
100 views

nmap bypass iptables rules | Redhat 5.6 [closed]

I have legacy system on Redhat Linux 5.6, with Nmap 4.11. ( IP: 10.11.4.22 ). I want to block access from this legacy system via every port/protocols to another server( IP: 10.11.4.24 ). I first ...
0
votes
1answer
73 views

Filtering nmap scan and outputting ip:port format

Host: 1.1.1.1 () Ports: 8080/open/tcp//http-proxy/// Ignored State: filtered (28) Host: 2.2.2.2 () Ports: 8888/open/tcp//sun-answerbook/// Ignored State: closed (28) Host: 3.3.3.3 () Ports: 1263/...
14
votes
2answers
10k views

nmap doesn't appear to list all open ports

My rental Linux server doesn't respond to nmap the way I thought it would. When I run nmap it shows three open ports: 80, 443 and 8080. However, I know ports 2083, 22 and 2222 should all be open, as ...
1
vote
1answer
144 views

How to make a port appear as being open every time it is scanned with nmap independently of its open/close state?

To make one open port undetectable with an external nmap scan, it seems easier to make all other scanned ports appear as being opened than to try to make this port appear as being closed. How can I ...
0
votes
2answers
2k views

nmap “filtered” results on a pretty naked server - could “filtered” just mean “silence”?

I get unintuitive results from "nmap -A " which I want to clarify. Setup: sshd (ssh deamon service) is successfully running. postfix is installed and so smpt service is running. However, it only ...
3
votes
1answer
104 views

Nmap Changed My Network?

I am running a clean install of Fedora 24, and I am not sure if I accidentally did some weird key combo, but I entered: nmap -sT -Pn [IPaddress] and, for some reason, this added a PCI network to my ...
-1
votes
1answer
344 views

Network Traffic Analyser using Shell Script

Is there any way or script that could ping and fetch the ttl simultaneously and store in two columns in a text file for a set of IP addresses that are alive on network- I wish to make a shell script ...
2
votes
0answers
482 views

Port 443 switching to filtered after openssl test

While I was investigating this issue related to SSL (published as OT in StackOverflow), I found a curious behaviour. Premise The premise is that I was trying to understand why my web server (hosted ...
1
vote
3answers
505 views

NMAP network scan shows IP-addresses and MAC addresses of items that are then missing from a subsequent arp-cache dump?

The logic I have is this get the definition of the subnet use nmap to scan every item in the subnet to populate the arp cache use the /usr/sbin/arp tool to dump the arp cache parse the arp-cache to ...