Questions tagged [nmap]

a free and open-source port scanner, operating system fingerprinter, and service fingerprinter

Filter by
Sorted by
Tagged with
1
vote
1answer
409 views

How to scan outbound closed ports with nmap?

I just noticed that my server is being blocked for rsync from a firewall outside of my server, so I can't rsync to any target. Now, I would also like to know what are all the ports that are being ...
0
votes
1answer
71 views

nmap show me differert result on the same machine

when i use nmap without sudo it show me the ports are open as nmap 192.168.1.5 Host is up (0.00091s latency). Not shown: 995 filtered ports PORT STATE SERVICE 80/tcp open http 110/tcp open ...
0
votes
1answer
639 views

traceroute: How to show TTL along hops

How could I show remaining time to live counters in mtr or traceroute results? $ mtr -r -w -c 10 91.250.127.30 Start: Mon May 15 12:20:44 2017 HOST: <snip> Loss% Snt ...
0
votes
1answer
601 views

nmap & arp cache behaviour

Why does the target of a nmap scan, where the target does not exist get entered into the arp cache? nmap -v -P0 -sT 192.168.1.103 That scan always shows "host up". This behaviour made me go crazy >...
0
votes
2answers
241 views

How to locate installed software command in Red Hat Linux 5?

I just installed nmap. I downloaded it; saved it to my desktop; and just double clicked the rpm package. The installation was successful. Now, when I tried in bash to run nmap it did not recognise the ...
2
votes
0answers
519 views

Why doesn't netstat show me some ports?

When port-scanning my computer with another machine, I find three open ports: Starting Nmap 7.40 ( https://nmap.org ) at 2017-05-08 22:14 CEST Nmap scan report for laptop.local (192.168.11.103) Host ...
1
vote
1answer
99 views

Why REJECT slows nmap?

Closing ports except 22 and 443. This dramatically slows down the nmap scans: -A INPUT -i eth0 -p tcp -m multiport --dports 22,443 -j ACCEPT -A INPUT -i eth0 -p tcp -j REJECT --reject-with icmp-port-...
1
vote
3answers
3k views

Parse nmap output file to print a list of IP with all open ports using awk

I would like to find the list of IP address with all open ports using awk command. My nmap output file is: # Nmap 7.01 scan initiated Sat Mar 18 06:27:08 2017 as: nmap -oG output.txt -T4 -f -iL ...
0
votes
2answers
973 views

Using regular expressions to parse ip addresses from logs

I have a large nmap scan containing a number of logs. I'm trying to turn this into a list of ip's only. When I run my command I receive feedback like the following: Starting Nmap 7.25BETA2 ( https://...
2
votes
3answers
2k views

How to pass multiple lines to a parameter without a for loop?

I have the following command to process nmap output that contains a list of ips that I've been asked to scan: cat ping-sweep.txt | grep "report for" | cut -d " " -f5 This is providing me a list of ...
7
votes
1answer
824 views

MTU (IPv4) tests in Linux

I noticed I have several networks with all ICMP messages blocked at the firewall level, except for ICMP echo and reply. I know that there is a need at least ICMP messages type 3 in IPv4 have to be ...
1
vote
3answers
383 views

How to format output from nmap in a specific predefined format

Assume I am executing nmap shell to find out a simple output.We are all familiar with this one: Starting Nmap 6.47 ( http://nmap.org ) at.... Nmap scan report for www.google.com (172.217.26.68) Host ...
3
votes
3answers
11k views

How to protect against port scanners?

Is it possible to prevent nmap from observing my machine entirely? After dropping all incoming connections with iptables port scans return as "filtered". It'd prefer if nmap couldn't see what ports ...
1
vote
1answer
2k views

where are port scan logs?

If I perform port scanning against a standard CentOS-7/RHEL-7 server or desktop, where do I see the logs? I have searched the /var/log directory but did not see any port scan related logs. NB: I ...
6
votes
2answers
8k views

Nmap scan for SNMP enabled devices

Nmap scanning network for SNMP enabled devices: sudo nmap -sU -p 161 --script default,snmp-sysdescr 26.14.32.120/24 I'm trying figure out how make that nmap return only devices that have specific ...
1
vote
0answers
550 views

How to generate a nmap HTML report with python?

Given an .xml output file from a nmap scan, how would you suggest to generate an html report from this file? nmap proposes the following utility with shell (reference): xsltproc xsltproc <nmap-...
2
votes
1answer
4k views

nmap raw packet privileges not working (“operation not permitted”, even as root)

Why am I getting the "operation not permitted" with nmap - even when executed as root? $ sudo nmap 192.168.1.2 Starting Nmap 7.12 ( https://nmap.org ) at 2017-01-13 02:12 CST sendto in ...
0
votes
1answer
624 views

Any similar tools like nmap for port scanning and finger printing OS

I have an assignment to do at school. They asked us to take 2 tools that has port scanning and finger printing and compare there results. I got the one tool nmap do you know any other?
2
votes
0answers
478 views

Port 443 switching to filtered after openssl test

While I was investigating this issue related to SSL (published as OT in StackOverflow), I found a curious behaviour. Premise The premise is that I was trying to understand why my web server (hosted ...
-1
votes
1answer
101 views

nmap command - suspicious behavior [closed]

I'm learning Linux on Cisco, and they display a certain message about the nmap command : CAUTION: To avoid suspicion of using the tool to find a way to attack the systems on your network, it is ...
1
vote
2answers
1k views

Stop bash command without killing script

So I have the following command running from the shell ~/for ip in $(cat ip_list);do mkdir $ip; cd $ip; for vuln in $(snmap http);do nmap --script=$vuln $ip -oN $vuln;done cd ../ ; done and it's ...
1
vote
0answers
889 views

Issues with nmap scan using ssh socks proxy with proxychains

I have a socks proxy made available to a remote computer, using ssh: ssh -D 127.0.0.1:9999 remoteuser@remotemachine I've adjusted the /etc/proxychains.conf: quiet_mode socks4 127.0.0.1 9999 After ...
1
vote
1answer
143 views

How to make a port appear as being open every time it is scanned with nmap independently of its open/close state?

To make one open port undetectable with an external nmap scan, it seems easier to make all other scanned ports appear as being opened than to try to make this port appear as being closed. How can I ...
2
votes
1answer
631 views

Find type of router

Is there a way to find my type of router from the command line? My IP address is the standard 192.168.1.1 IP address.
1
vote
1answer
161 views

how to use only certain addresses in subnet for traceroute?

First I try running nmap -sn ip/24 to check live hosts on a subnet. It returns that all 255 hosts are live which I know is not true. I do fping -g ip/24 and get that 7 hosts are up which makes more ...
1
vote
1answer
54 views

Sorting block of lines matching only the first one

I have an Nmap output file like this: Nmap scan report for AAAAAAAAAAAAAAAAAA.akamaitechnologies.com (IP) Host is up, received user-set (0.027s latency). Scanned at 2016-10-09 14:43:24 CEST for 15s ...
1
vote
3answers
7k views

nmap is exponentialy slow when scanning more ports

I sometimes use nmap to check my hosts. For example: nmap -sS -p- example.com But this command never finish. So I divide the scan into small parts: nmap -sS -p 0-999 example.com (12 seconds to finish)...
0
votes
1answer
942 views

problem using nmap with proxychains [closed]

I'm using nmap with proxychains on my kali When I write proxychains nmap -A [Destination] I get the following error ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.01 ( https://nmap.org ...
4
votes
2answers
6k views

How can I view all device names on LAN?

I am trying to scan my local network and return a list of all connected devices with there IP, MAC Address & device name. By device name, I mean my iPhone should say 'Jamies-iPhone' as it would ...
1
vote
1answer
349 views

Configure masscan to leave user agent in server logs

I'm trying to configure the nmap-like program masscan to leave a useragent (and all the other usual info that comes along with the useragent, but the useragent is what I'm most concerned with) in the ...
3
votes
0answers
351 views

Why nmap is slow with Debian stretch/testing with Broadcom BCM5708?

I had freshly installed Debian testing for a HP G5 server with Broadcom BCM5708 network card. Nmap scans are about 10 times slower that running on another HP G5 server with different network card. I ...
1
vote
1answer
2k views

telnet to an host/port works while no service on this host listening on this port

I am crashing my head against the wall with this one... I run nmap from my desktop for a specific server I have, to check some opened ports which could be security issues. It returns ports which ...
3
votes
1answer
104 views

Nmap Changed My Network?

I am running a clean install of Fedora 24, and I am not sure if I accidentally did some weird key combo, but I entered: nmap -sT -Pn [IPaddress] and, for some reason, this added a PCI network to my ...
13
votes
1answer
6k views

What's the gnu-netcat's '-z' equivalent option in nmap-ncat?

I check for a listening port on a service prior to running a script using this : until nc -z $HOST $PORT do echo "waiting for service to be available..." sleep 0.5 done exec "/my/script" It ...
1
vote
1answer
320 views

Why nmap closed my connection?

I started new connection on port 3333 typing nc -l 3333. Then in other terminal window I typed nmap -sT -O localhost to check if 3333 port is really open. After this command my connection on port 3333 ...
2
votes
2answers
714 views

Fedora 24: ports show as open when scanned from server, but closed when nmapped from outside

I have a Fedora 24 server, serving an Angular2 project. Angular2 automatically opens ports 3000 and 3001 once the service is started. However, although running nmap localhost shows the ports are open, ...
4
votes
1answer
2k views

Parse (grepable) nmap output to print a list of IP\t[all open ports] with text utils like awk

I would like to find a way to print for each IP address found to have at least one open port, to print that IP address, followed by a list of open ports separated by commas. The ports and IP address ...
3
votes
2answers
3k views

How to tell stateful vs stateless firewall with nmap ACK scan

I'm having trouble figuring this out. Supposedly, nmap can distinguish stateful firewalls from stateless firewalls by using the -sA or ACK scan, but I'm at a loss as to how one would discern that fact ...
1
vote
2answers
713 views

nmap socket trouble

I've been trying to use nmap but it fails with the following output: Starting Nmap 6.47 ( http://nmap.org ) at 2016-06-21 22:24 PDT NSOCK ERROR [0.3460s] nsock_make_socket(): Socket trouble: Address ...
2
votes
1answer
657 views

nmap does not report all open ports?

An excerpt from the output of netstat: tcp4 0 0 192.168.2.48.49620 stackoverflow.co.https ESTABLISHED tcp4 0 0 192.168.2.48.49554 stackoverflow.co.https ESTABLISHED ...
2
votes
1answer
1k views

Can you send a TCP packet with RST flag set using IPTABLES as a way to trick NMAP into thinking a port is closed?

I am learning Nmap and a thought occurred to me with regards to a SYN scan... A SYN scan sends an empty TCP packet with the SYN flag set to illicit a response from the target of either RST, ...
1
vote
1answer
3k views

How to proxy nmap and dns resolution of nmap

How to use nmap and dns resolution of nmap over proxy? I tried proxychains, but for dns resolution it doesn't work, it's known bug as I read on some forums. It works well without dns_proxy feature in ...
2
votes
0answers
351 views

why does nmap shows same ports sometimes as filtered and sometimes as closed?

When I'm scanning port range 4050-4060 of an smart metering device all ports are reported as closed: root@abc:~/rvm/dlms# nmap -p 4050-4060 192.168.1.242 Starting Nmap 6.47 ( http://nmap.org ) at ...
0
votes
2answers
367 views

Nmap traceroute max TTL

(Ubuntu 14.04.4 LTS) traceroute has -m, --max-hop=NUM, as does tracepath. How can I limit the max number of hops when using: nmap -Pn -sn --traceroute ?
1
vote
1answer
490 views

Ubuntu, lua, nmap and sqlite3 - module 'luasql.sqlite3' not found

I need to work with nmap and sqlite3 and I installed lua 5.1 and lua-sql-sqlite3 on an ubuntu machine: sudo apt-get install lua5.1; sudo apt-get install lua-sql-sqlite3 Now, when I'm doing this: $ ...
5
votes
1answer
4k views

How does FING (or any of the IP/MAC Address Mappers) work?

Per this comment, I'm going to take advice and ask this as a separate question. I am trying to learn more about networking and security and want to play with tools to help increase my understanding. ...
1
vote
2answers
7k views

How to “open” on a “filtered” port

I am running: $ ssh user@ip_address and waiting for long time without response. I try to verify the status of my port: $ a=`nmap ip_address -PN -p ssh | grep filtered` $ echo $a 22/tcp ...
3
votes
2answers
23k views

ICMP : Port unreachable error even if port is open

I am testing my Debian Server with some Nmap port Scanning. My Debian is a Virtual Machine running on a bridged connection. Classic port scanning using TCP SYN request works fine and detects port 80 ...
1
vote
1answer
1k views

How to force Nmap to use -PE option on local network?

I am trying to use Host Discovery Nmap function using the -PE (ICMP Echo Ping) option to discover hosts on my local network (virtuals machines on bridged connection). So when I run : nmap -PE 192....
1
vote
3answers
755 views

bash multi-threads

I have a list of IPs and I need to check them for opened ports using nmap. So far, my script is like this: #!/bin/bash filename="$1" port="$2" echo "STARTING NMAP" while IFS= read -r line do nmap -...