Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.
Questions tagged [nmap]
255 questions
0
votes
2 answers
Generate List of IP's With User Names On Windows Network
We recently setup GFI WebMonitor on our network which is giving me back IP's instead of User's. I'm in the process of determining whether we will be able to implement authentication on the proxy to use ISA or TMG to let it resolve but for the…

bumble_bee_tuna
- 443
- 11
- 26
0
votes
2 answers
nmap port 3128 shows open but no squid running
Im trying to lock down an Ubuntu server and ran nmap -T4 against
my server. Everything looks right except that it shows port 3128
open but I dont run a squid server or anything else I know of on
that port.
PORT STATE SERVICE
80/tcp open …

Tim
- 203
- 1
- 9
0
votes
1 answer
nmap repeats the scan to a specific port multiple time
I scanned a subnet (16 hosts) while dumping the network traffic with wireshark.
I did it 2 times and I noticed that in the traffic there is the normal SYN-SYN/ACK and SYN-RST from open/closed port, but also there are thousands of SYN-SYN/ACK (and…

Possa
- 185
- 1
- 9
0
votes
2 answers
How best to enumerate a server network
What techniques do you typically use, when you start a gig at a complex environment and no one can tell you what servers are out there, and documentation doesn't exist? I typically start off with getting access to one system, and a few URLs, then…

sed_and_done
- 183
- 8
0
votes
1 answer
NMAP service probe or normal port scan
Apologies - I am very new to these things.I read that
nmap-service-probes
will display the service that the port is using while
nmap -sS
will send a stealth SYN which is also capable of determining whether a port is open or not. My question is if…

user1234008
- 13
- 1
0
votes
1 answer
Two Identical mac addresses on the same lan - Tracking one down?
So I've been playing around with nmap, and found a curious problem, two devices in the same subnet have the same mac address. I would like to track down the second mac, as the first one is the sonic wall, which has some unsettling implications.
If…

Sidney
- 184
- 1
- 1
- 7
0
votes
1 answer
Finding ips and hosts in a LAN . Different results
I need to scan a LAN and match hosts with ips. I used nmap -sL 192.168.1.* and i got a list of hosts and ips as i wanted. But when i checked using ipconfig on a few machines i saw that resuts form ipconfig were different. for example host with…

Alexander Arist
- 13
- 3
0
votes
2 answers
making sense of the nmap options
An nmap option I see in some examples uses the -sP option, but I haven't seen this listed anywhere in their options or --help. Is -sP an option you construct from the other options? If so, please explain briefly how the syntax works. If not, where…

T. Webster
- 346
- 3
- 9
- 20
0
votes
1 answer
Do an os scan with nmap only
Is it possible to do an OS detection scan with nmap without scanning a port? I really need only OS detection and try to reduce the amount of traffic as much as possible.
By the way what is the most accurate to do an OS sdcan? At the moment I do …

Laoneo
- 274
- 1
- 3
- 13
0
votes
1 answer
NAT and find inside global address
To try to find the inside local address of a host, on a LAN with 1 Cisco wireless router, I run nping on one Windows7 host 192.168.1.138.
C:\>nping --ec "public" -c 1 echo.nmap.org
SENT (1.4430s) ICMP 192.168.1.138 > 74.207.244.221 Echo request…

T. Webster
- 346
- 3
- 9
- 20
0
votes
1 answer
Need equivalent of command with nmap, awk and grep for Windows machines with PowerShell and/or Perl
Please see this thread for reference
How can I scan using nmap and Zenmap all hostnames that begin with a particular string?
One of the answers in the thread above uses the following query (I take no credit at all for the command):
nmap -sL -oG -…

user717236
- 265
- 1
- 4
- 17
0
votes
2 answers
How can I scan using nmap and Zenmap all hostnames that begin with a particular string?
I have a number of nodes on a couple of networks whose hostnames all start with org. Some examples are:
orgwebsvr1
orgwebsvr2
orgwebsvr3
orgdbsvrmysql
orgdbsvrmssql
orgdbsvrosql
With nmap, I know that I can scan multiple targets using the IP or an…

user717236
- 265
- 1
- 4
- 17
0
votes
1 answer
Apache SSL not accepting outside traffic
Running Apache 2 on Ubuntu 11 in Amazon EC2. Tried to add a new SSL VirtualHost by doing the following:
Added "Listen 443" to ports.conf.
Added new VirtualHost in my enabled site and "SSLEngine on".
The strange thing is this: I can curl…

Chris Fong
- 3
- 2
0
votes
1 answer
nmap not outputting one line to console when using -oG
when I run:
nmap --open -sT -p 5900,3389 -oG test 10.0.1.121
This outputs to console:
Starting Nmap 5.00 ( http://nmap.org ) at 2013-02-15 16:31 PST
Interesting ports on 10.0.1.121:
Not shown: 1 filtered port
PORT STATE SERVICE
3389/tcp open …

David Neudorfer
- 171
- 3
- 9
0
votes
2 answers
nmap configuration file
I'm running Linux mint and I need to modify my nmap configuration's default service enumeration by making a new service list. I think I do this in the config file (I'm not positive), but I can't seem to find an nmap config file. I know the…

trueCamelType
- 1,086
- 5
- 20
- 42